Zotero MCP Server
Unofficial MCP server for Zotero integration with citation management
context tax
pending
security
92/100
cold start
pending
freshness
Active6d ago
Our reading of Zotero, from the data
Zotero is an MCP server from xevos117.
We haven't measured its tool list yet, so its token cost is unknown.
Maintenance is active: the last public signal was 6 days ago (2026-10-12).
It runs locally on your machine over stdio.
Install Zotero MCP server
Install in Claude Code
claude mcp add zotero-xevos117 -- npx -y @xevos117/mcp-zoteroInstall in Cursor
{
"mcpServers": {
"zotero-xevos117": {
"command": "npx",
"args": [
"-y",
"@xevos117/mcp-zotero"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"zotero-xevos117": {
"command": "npx",
"args": [
"-y",
"@xevos117/mcp-zotero"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"zotero-xevos117": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@xevos117/mcp-zotero"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"zotero-xevos117": {
"command": "npx",
"args": [
"-y",
"@xevos117/mcp-zotero"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Security signals
92/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.
Deductions
- No license detected-5
- No security policy (SECURITY.md)-3
Checks
- ✓Repository hygiene (archived, activity, license, security policy)
- ○Package metadata (install scripts, provenance) — pending
- ○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
- ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending
Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules
Freshness
Active — last maintenance signal 6d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-12 · 6d ago · GitHub
Latest release
2026-10-12 · 6d ago · GitHub · 2.0.2
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry
FAQ
›How do I install the Zotero MCP server in Claude Code?
Run: claude mcp add zotero-xevos117 -- npx -y @xevos117/mcp-zotero. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Zotero require an API key?
No required environment variables are declared in its published metadata.
›Can I use Zotero as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Zotero in the official MCP registry?
No. It was indexed from npm.
Sources and method
- GitHub repository
- fetched 2026-10-19
- Package registry (npm / PyPI)
- listed
- Security signals, computed by us
- 2026-10-19
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.