Zotero Dev MCP server
io.github.introfini/mcp-server-zotero-dev·v1.1.4·40 starsMCP server enabling AI assistants to build, test, and debug Zotero plugins
40 stars73 downloads/wk
Reviews
Write oneNobody has reviewed Zotero Dev yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Zotero Dev tools (28, 5 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
zotero_clear_logsClear the debug log buffer and error console.
zotero_click_elementClick an element in a Zotero window by CSS selector (toolbar/menu button,
zotero_db_querywrite actionExecute a SELECT query on Zotero's database.
zotero_db_schemaGet database schema information.
zotero_db_statsGet database statistics: item counts, file size, etc.
zotero_execute_jswrite actionExecute JavaScript code in Zotero's privileged chrome context.
zotero_get_dom_treeGet a simplified DOM tree structure.
zotero_get_prefGet a Zotero preference value.
zotero_get_stylesGet computed CSS styles for an element.
zotero_inspect_elementFind DOM elements by CSS selector and return their details.
zotero_inspect_objectInspect a Zotero/JavaScript object to discover its methods and properties.
zotero_list_windowsList all open Zotero windows with their IDs, types, and titles.
zotero_open_preferencesOpen Zotero's preferences/settings window. Optionally navigate directly to a specific pane.
zotero_pingTest connection to Zotero and get version info.
zotero_plugin_installInstall a Zotero plugin from a local XPI file.
zotero_plugin_listList all installed Zotero plugins/add-ons with their IDs, names, versions, and status.
zotero_plugin_reloadReload a Zotero plugin.
zotero_read_errorsRead errors from Zotero's error console.
zotero_read_logsRead Zotero's debug log output.
zotero_scaffold_buildBuild a Zotero plugin project using zotero-plugin-scaffold.
zotero_scaffold_lintwrite actionRun ESLint on a Zotero plugin project.
zotero_scaffold_serveStart/stop the zotero-plugin-scaffold dev server with hot reload.
zotero_scaffold_typecheckwrite actionRun TypeScript type checking on a Zotero plugin project.
zotero_screenshotCapture a screenshot of Zotero. Can capture the main window, a specific window,
zotero_search_prefsSearch and list Zotero/Firefox preferences.
zotero_send_keyswrite actionType text into an element in a Zotero window (an input/textarea or any
zotero_set_prefSet a Zotero preference value.
zotero_watch_logsStart/stop watching for new log messages.
Public scan report
scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it
- Code scan37 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 26 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/tools/database.js: …} // Payload is JSON-encoded in the eval (see above) - decode it here. const r…
How Zotero Dev compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 48,243 servers
- Tools
- 28
- the typical server has 7
- Tools that change things
- 18%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 40
- more than 93% of 28,706 servers
- Downloads a week
- 73
- more than 54% of 12,306 servers with a package
What its tools let an agent do: 23 read · 5 change
Release history: 2 versions in the registry since 2026-08-17, latest 2026-09-20, typically one every 34 days.
Install Zotero Dev in Claude Code, Cursor or VS Code
Runs npx -y @introfini/mcp-server-zotero-dev on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server-zotero-dev -- npx -y @introfini/mcp-server-zotero-dev
What the publisher says
From the Zotero Dev repository's README, as published. We do not edit it. Read it on GitHub
MCP Server Zotero Dev
Give your AI assistant superpowers for Zotero plugin development
Architecture · Getting Started · Available Tools
A Model Context Protocol (MCP) server that enables AI assistants like Claude, Cursor, and Windsurf to build, test, and debug Zotero 7, 8, 9, and 10 plugins. Screenshots, DOM state, debug logs, and JavaScript execution give the AI rich context to understand what's happening—and tools to help you fix it.
✨ Features
🚀 Quick Start
Prerequisites
- Node.js 20+ and npm
- Zotero 7+ — Works on all Zotero 7, 8, 9, and 10 builds (release, beta, dev)
- For plugin development: zotero-plugin-scaffold
1. Install MCP Server
Use install-mcp to add the server to your AI assistant:
npx -y install-mcp @introfini/mcp-server-zotero-dev --client claude-codeSupported clients: claude-code, cursor, windsurf, vscode, cline, roo-cline, claude, zed, goose, warp, codex
Claude Code
npx -y install-mcp @introfini/mcp-server-zotero-dev --client claude-codeCursor
npx -y install-mcp @introfini/mcp-server-zotero-dev --client cursorVS Code / Copilot
npx -y install-mcp @introfini/mcp-server-zotero-dev --client vscodeWindsurf
npx -y install-mcp @introfini/mcp-server-zotero-dev --client windsurfManual Configuration
Add to your MCP client config:
{
"mcpServers": {
"zotero-dev": {
"command": "npx",
"args": ["-y", "@introfini/mcp-server-zotero-dev@1.1.1"],
"env": {
"ZOTERO_RDP_PORT": "6100"
}
}
}
}Version & updates: pin an exact version as shown above. A bare npx (no version) keeps running whatever npx cached and won't pick up new releases, so always include a version and -y (without -y, npx hangs waiting for an install prompt). Bump the pinned version to upgrade, or use @latest to always fetch the newest at launch (auto-updates, but a bad release would run automatically and it adds a registry check on every start). Note that install-mcp may write a config without -y or a version, so the manual configuration above is the most robust path.
Restart your AI assistant after adding the configuration.
2. Install MCP Bridge Plugin in Zotero
Download zotero-mcp-bridge.xpi and install:
- In Zotero: Tools → Plugins
- Click ⚙️ → Install Plugin From File
- Select the downloaded .xpi file
- Restart Zotero
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Zotero Dev: common questions
- Is Zotero Dev MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Zotero Dev safety report
- How do I install Zotero Dev?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Zotero Dev need an API key?
- No secret keys are declared. It reads 2 settings from the environment.
- Is Zotero Dev maintained?
- The last commit was 46 days ago (2026-09-20). The latest release is v1.1.4.
- How does Zotero Dev compare with other MCP servers?
- safety score 85/100 (higher than 70% of 48,243 servers); tools 28 (the typical server has 7); tools that change things 18% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.