Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 5
- 4 8
- 3 6
- 2 1
- 1 0
Trust in production
- Trust it - 50%
- With caveats - 30%
- Wouldn't - 20%
75% would recommend this server
How reviewers scored it
- Setup & docs 3.9
- Auth experience 3.8
- Reliability 3.9
- Maintainer responsiveness 3.9
Why it got a B
A community MCP server for Zotero (MIT, Python, PyPI zotero-mcp-server, about 5.8K GitHub stars, 100+ contributors). In local mode it reads straight from your zotero.sqlite or Zotero's local API with no account or key; writes go through Zotero 10+ after a one-time authorization, or through the Zotero web API with an API key you can limit per library. Tools search by title, author, tag, full text or meaning (optional embeddings, including OpenAI or Gemini, which send your text to them), read metadata, BibTeX and PDF pages, add highlights and notes, add items by DOI, URL or BibTeX, and manage collections and tags. The same package ships zotero-cli and an agent skill, which the README suggests for Claude Code and other clients with a shell because it costs far fewer tokens. Biggest deduction: an optional PDF-annotation fallback downloads a third-party binary (pdfannots2json) from GitHub without a checksum and runs it on your files, and the optional HTTP mode has no login, so stay on stdio.
How to connect
// claude_desktop_config.json (README)
{ "mcpServers": { "zotero": { "command": "zotero-mcp",
"env": { "ZOTERO_LOCAL": "true" } } } }Is Zotero MCP (zotero-mcp-server) safe?
Is Zotero MCP (zotero-mcp-server) safe to use?
Zotero MCP (zotero-mcp-server) grades B (solid, with minor gaps). Login is optional, so check that it is turned on in your setup. It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does Zotero MCP (zotero-mcp-server) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Zotero MCP (zotero-mcp-server) support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Docs & Knowledge
- A Context7 MCPPulls version-accurate library documentation into the model context.
- B Stack Overflow MCP ServerOfficial hosted Stack Overflow server (beta) to search questions and answers.
- C AIOS Public Discovery MCP ServerHosted server that checks the status, recent changes and source evidence of five monitored GOV.UK employment guidance topics, including minimum wage and statutory sick pay.
- C AWS Knowledge MCP ServerAWS's hosted read-only server for AWS docs, API references, regional availability and agent skills.
- C Connect Pro for Obsidian (Smart Plugins)Paid Smart Plugins add-on that serves your open Obsidian vault to ChatGPT (Remote MCP) or to desktop AI apps on the same computer (Local MCP), to read notes, run semantic lookups and propose edits you approve in an Inbox.
Embed this badge
[](https://trustedmcp.io/servers/zotero-mcp)<a href="https://trustedmcp.io/servers/zotero-mcp"><img src="https://trustedmcp.io/badge/zotero-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Trustworthy enough for real work
Set this up for our team after comparing a few options. It is community maintained, so I pin the version and read the changelog before upgrading. Filed an issue and got a reply within two days. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. It is in our production agent and I sleep fine.
Used for Summarising meeting notes
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Does the job, docs could be better
Mostly reliable, with the odd timeout. I run it with auth enabled. Without it I would not let it near anything shared. Fine in production if you sandbox it.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Handy for dev, careful in prod
It does the job, but it took some tweaking. It is community maintained, so I pin the version and read the changelog before upgrading. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Answering questions from our internal wiki
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
No complaints after a month
Set this up for our team after comparing a few options. Token setup is the fiddliest part, after that it is smooth. Would recommend without hesitation.
Used for Drafting docs from existing pages
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Promising, a bit raw
Good for experimenting, still deciding about production. Filed an issue and got a reply within two days. Not something I would put in production yet.
Used for Keeping a team knowledge base tidy
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Solid and well behaved
Our agents call this dozens of times a day. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Recommended, with sensible guardrails.
Used for Finding the right runbook during incidents
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Surprisingly polished
Clear tool names, sensible outputs, very few surprises. I run it with auth enabled. Without it I would not let it near anything shared. I gave it a database user that can only read the tables it needs. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. I would use it in prod, but only with a human approving writes.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Does what it says, no drama
Tried it on a side project first, then rolled it out at work. Releases come often and the changelog is clear. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. The API key sits in the config file, so I made a dedicated key with minimal permissions. Would recommend without hesitation.
Used for Onboarding Q&A for new hires
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Good defaults, good docs
Started with it as an experiment, now it is a fixture. You can tell it is actively maintained, the rough edges keep getting fixed. Easy recommendation.
Used for Drafting docs from existing pages
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Needs more maintenance love
It works in a demo, but things got shaky under real use. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. For anything real I would look elsewhere.
Used for Onboarding Q&A for new hires
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Useful, with a few rough edges
Took longer to configure than I expected. I gave it a database user that can only read the tables it needs. Filed an issue and got a reply within two days. Keeping it to local experiments for now.
Used for Keeping a team knowledge base tidy
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Replaced a homegrown script with Zotero MCP (zotero-mcp-server) and have not looked back. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Good choice if you need Zotero (zotero--) in your agent.
Used for Keeping a team knowledge base tidy
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Of the Zotero (zotero--) integrations I tried, this one is the most predictable. Gave it its own API key so I can revoke it without breaking anything else. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Keep permissions tight and it is a good tool.
Used for Drafting docs from existing pages
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
I use this almost daily. Updates land regularly, and nothing broke when I upgraded. Happy to run it in production.
Used for Answering questions from our internal wiki
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Capable but needs guardrails
I like it, with reservations. I run it with auth enabled. Without it I would not let it near anything shared. Releases come often and the changelog is clear. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Summarising meeting notes
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Our team uses it every day
Simple to set up in Cursor, simple to reason about. It is community maintained, so I pin the version and read the changelog before upgrading. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Summarising meeting notes
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
The Zotero (zotero--) integration I wanted
Installed it on a Friday, it was part of my workflow by Monday. Updates land regularly, and nothing broke when I upgraded. I gave it a database user that can only read the tables it needs. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Pulling up-to-date library docs into prompts
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Fine once configured properly
Useful tool, though I would not hand it to a junior unsupervised. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Token setup is the fiddliest part, after that it is smooth.
Used for Finding the right runbook during incidents
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Been running this for about a month now. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. It is in our production agent and I sleep fine.
Used for Finding the right runbook during incidents
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Hooked Zotero MCP (zotero-mcp-server) into Claude Code and it worked on the first try. You can tell it is actively maintained, the rough edges keep getting fixed. I gave it a database user that can only read the tables it needs. I run it with auth enabled. Without it I would not let it near anything shared. Good choice if you need Zotero (zotero--) in your agent.
Used for Answering questions from our internal wiki
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.