Mmcp.market

Zoteus MCP server

by oscardvs·io.github.oscardvs/zoteus·v1.20.2

Zotero MCP server for Claude and ChatGPT: search, citations, safe writes, PDF passages and pages.

B78/100grade B
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
Growing

41 stars

Reviews

Write one

Nobody has reviewed Zoteus yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Zoteus tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan245 source files scanned8/25
  • Live reliabilityremote reachable in 151ms (auth required)20/20
  • Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumNetwork call to a raw IP addressnet.raw-ip
    dist/api/local-writes.d.ts: …to the same local API the reads use * (http://127.0.0.1:23119/api/users/0/...), gated by a *local* API…
  • highShell command built from a string (injection risk)exec.shell-concat
    dist/features/search/sqlite-index.js: …F EXISTS passages_fts'); db.exec(` CREATE VIRTUAL TABLE passages_fts USING fts5( text, content='passages', content_rowid='pid', tokenize='${FTS_TOKENIZER}' ); `); …
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http zoteus https://mcp.zoteus.com/mcp
Add to Cursor

Zoteus: common questions

Is Zoteus MCP server safe?
Mostly: it is graded B (78/100). Read the Zoteus safety report
How do I install Zoteus?
It runs remotely at mcp.zoteus.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Zoteus need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is Zoteus maintained?
The last commit was 2 days ago (2026-09-17). The latest release is v1.20.2.
What can I use instead of Zoteus?
Servers from other publishers that do the same job: Pubmed MCP server, Zotero MCP server and GEO Tracker by DigestSEO MCP server. Compare all Zoteus alternatives.

Alternatives to Zoteus

Same job from other publishers: the closest match first, then the best rated.

All Zoteus alternatives →
  • Pubmed
    Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms.
    A
  • Zotero MCP
    Search, read, annotate, and add to your Zotero research library, local or web.
    C
  • GEO Tracker by DigestSEO
    Track brand citations across five AI search engines. Free OSS; optional EUR 99 client-ready audit.
    A
  • HasData Google Scholar
    Google Scholar search results, citation counts and citation export formats, as structured JSON.
    A
  • Books & Papers MCP Server
    Federated search of books and papers, BibTeX/RIS citations, open-access retrieval and reading.
    A

More from oscardvs