How do I install Zoteus?

Zoteus supports both local and remote installation. For local use, install it via npm (npx) and add the configuration to your AI app. For remote access, add the server URL to your MCP configuration.

What credentials does Zoteus need?

Zoteus requires the following credentials or environment variables: ZOTERO_API_KEY, ZOTEUS_LOCAL, ZOTEUS_ALLOW_DELETE. You can find setup instructions on the server detail page.

What AI apps work with Zoteus?

Zoteus uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Zoteus MCP Server

by Oscardvs

Developer ToolsModerate5.7MCP RegistryLocalRemote

Free

Server data from the Official MCP Registry

The everything Zotero MCP server — Web API v3 + local API, safe writes, citations, search.

About

The everything Zotero MCP server — Web API v3 + local API, safe writes, citations, search.

Remote endpoints: streamable-http: https://zoteus.duckdns.org/mcp

Security Report

5.7

Moderate5.7Moderate Risk

Zoteus is a well-architected Zotero MCP server with strong security practices. Authentication is properly scoped (API key for cloud operations, optional for local reads), OAuth 2.1+PKCE is correctly implemented for remote/multi-tenant deployments, and sensitive credential handling follows best practices. The codebase demonstrates careful design with version-gated writes, rate limiting, and input validation. Minor findings include broad exception handling and a hardcoded default translation server URL, but these do not materially impact security posture. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue.

4 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Zotero API key (writes/sync/groups; optional for local-only reads).Required

Environment variable: ZOTERO_API_KEY

Use the Zotero desktop local API: auto | on | off.Optional

Environment variable: ZOTEUS_LOCAL

Set to true to enable permanent deletion (off by default).Optional

Environment variable: ZOTEUS_ALLOW_DELETE

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

Zoteus MCP Server

About

Security Report

Findings (6)Action required

Permissions Required

What You'll Need

How to Install & Connect

Reviews

No reviews yet

More Developer Tools MCP Servers

Git

Toleno

mcp-creator-python

MarkItDown

mcp-creator-typescript

FinAgent