Zotero MCP server for Claude and ChatGPT: search, citations, safe writes, PDF passages and pages.
Zoteus MCP Server (io.github.oscardvs/zoteus)
Zoteus is an MCP server that provides MCP clients access to a Zotero library. It supports semantic or keyword search, retrieving PDF passages with page numbers, generating citations in CSL styles, adding items, and performing safe writes. It is intended for clients such as Claude Desktop, claude.ai, Claude Code, Cursor, and other MCP-capable tools.
🛠️ Key Features
Search by keyword or meaning
PDF passages with page numbers
Citations in any CSL style
Add items to Zotero
Safe writes
🚀 Use Cases
Research workflows against an existing Zotero collection
Finding relevant documents via semantic or keyword search
Extracting exact PDF passages and referencing their pages
Producing citations in specific CSL formats
Updating a Zotero library through controlled writes
⚡ Developer Benefits
Integrates Zotero with MCP clients
Supports bibliographic workflows: citations and item management
Uses the Model Context Protocol (mcp-server) for standardized tool access
⚠️ Limitations
Requires access to a Zotero library via the MCP server
Scope described focuses on search, passages (with page numbers), citations, and safe writes
A Zotero MCP server. Your whole library, inside Claude and ChatGPT.
Zoteus gives Claude Desktop, claude.ai, ChatGPT, Claude Code, Cursor and any other MCP client access to a Zotero library: search by keyword or by meaning, passages from your PDFs with page numbers, citations in any CSL style, adding items, and safe writes.
Claude in the browser answering a question from a Zotero library through Zoteus: the question is typed, the Zoteus tools run, and the answer arrives with a verbatim passage, its page number, and APA references.
A real session, 6 September 2026, against the maintainer's own library. Tool calls are shown as a time-lapse. The full recording is on zoteus.com.
Install
For most clients there is nothing to download: the client fetches Zoteus with npx the first time it runs. New to MCP servers? Start with docs/getting-started.md.
Client
How
Claude Desktop
Download the bundle for your system from the latest release, zoteus-macos.mcpb, zoteus-windows.mcpb or zoteus-linux.mcpb, and double-click it.
Claude Code
claude mcp add --transport stdio zoteus -- npx -y @oscardvs/zoteus
Cursor, VS Code, Zed, Codex, Gemini CLI, any MCP client
npx add-mcp @oscardvs/zoteus, or add npx -y @oscardvs/zoteus as a stdio server by hand.
Needs Developer mode on a paid ChatGPT plan (Settings → Security and login). Then Plugins → Create app, with the server URL of a hosted Zoteus (https://mcp.zoteus.com/mcp) or of your own remote instance, and OAuth as the authentication. ChatGPT only connects to remote servers, so the npx install does not apply.
Then run the Zotero desktop app. Reads, and the personal-library writes that go through the app (adding items by identifier, attachments, annotations, trash and restore), need no cloud key. Add a Zotero API key for sync, group libraries, metadata edits, tags and collections, and for when the app is closed:
Updating a desktop-extension install. A manually installed .mcpb (or older .dxt) does not auto-update. Turn on Check for updates in the extension settings (or set ZOTEUS_UPDATE_CHECK=true) and Zoteus asks GitHub once a day, then says so in-chat via zotero_whoami when a newer version exists; download the new bundle for your system and reinstall. The check is off by default. npx installs always run the latest published version.
What it does
Zoteus exposes research tools, namespaced zotero_*, that search the library by keyword or by meaning, return passages from your PDFs with page locators, show PDF pages and figures as images, format bibliographies with citeproc-js in any CSL style, add items by DOI or arXiv id, and create, edit, tag and organize items with versioned writes and a reversible trash. When the Zotero desktop app is running, reads and personal-library writes go to it directly and need no cloud API key; the Zotero Web API v3 is the fallback for sync, group libraries, and for when the app is closed. Zoteus is written in TypeScript, runs on your machine, and is MIT licensed.
Features
Search your own library. Hybrid keyword and semantic search over titles, abstracts, creators, and tags, plus full-text keyword search inside your PDFs and notes, with the matching passage returned together with its page number. Your own notes and PDF annotations are indexed under the item they belong to, so "where did I object to this?" is a question search can answer. Set ZOTEUS_INDEX_FULLTEXT (or pass fulltext:true to zotero_index) and indexed search also covers available PDF body text within configured caps, so a claim that never made it into an abstract is still findable.
Format citations. Zoteus reads the citation data in your Zotero library and formats it with citeproc-js in any CSL style from the CSL styles repository.
Add a paper by identifier. Pass a DOI or arXiv id and Zoteus fetches the metadata and files the item. This works out of the box through built-in resolvers; a Zotero translation-server extends it to ISBN, PMID, and URLs (see docs/resolver.md).
Write back. Create items, edit, tag, and organize. Writes are versioned with optimistic-locking retries, trash is reversible by default, and permanent deletion is opt-in and confirmation-gated.
Write straight to the desktop app. Adding items by identifier, attachments, annotations, and trash and restore go to your running Zotero with no cloud API key. On Zotero 10+ this uses the local API behind a key you grant once ("Always Allow"); on Zotero 9 and earlier, whose local API is read-only, it uses the connector protocol the browser extensions use. The cloud Web API is the fallback for group libraries, for metadata edits, tags, collections and saved searches, and for when the app is not running.
Annotate PDFs and attach files.zotero_annotate adds highlights, underlines, and notes, the same objects the Zotero PDF reader creates. Quote the passage and Zoteus locates it in the PDF and anchors the annotation to the lines it occupies, wrapping and hyphenation included, so no page coordinates are needed. zotero_attach_file stores a local file or a URL as an attachment under any item.
Ground claims in the PDF.zotero_get_fulltext returns the relevant passage with character offsets, the nearest heading, and a page locator. When Zotero has not indexed the PDF or EPUB, it extracts the text on the fly, from the running desktop app or from Zotero's own storage folder, so a file added a minute ago is readable immediately. It also returns a PDF's table of contents (outline:true) and any page range on demand, so working through a 400-page book costs a few small calls rather than one that returns the whole book.
Look at the page.zotero_pdf_images renders any page of a PDF to an image the model can see, so a figure, a table, an equation, or a scanned page with no text layer is no longer out of reach, and extracts the figures embedded in a page to files, like pdfimages, each with its position on the page. It draws through the same pdfjs that reads the text, so it needs nothing that is not already installed.
Follow the literature.zotero_scholar looks up a paper's references, citing works, and related works through OpenAlex, with Crossref as a fallback, and can flag which of them are already in your library.
Import a bibliography, find duplicates, merge them.zotero_import reads BibTeX, RIS and CSL-JSON as text or a file without a translation-server, recovers a DOI or arXiv id from a PDF's first pages, and can check the library for an existing copy before saving. zotero_merge_items folds duplicates into one record: it previews by default, fills only what the master lacks, unions tags, collections and relations, reparents notes and attachments, and trashes the emptied copies (see docs/importing-bibliographies.md, docs/duplicates-and-merging.md).
Open-access copies and retraction notices.zotero_scholar reports an open-access PDF when OpenAlex knows one and zotero_attach_file can fetch and attach it from the DOI, recording which version it is; zotero_scholar also reports retraction and correction records from Crossref and OpenAlex, as records rather than a verdict (docs/open-access-pdfs.md, docs/retraction-notices.md).
Evidence tables and Word documents. A zotero-evidence-table prompt plus zotero_evidence_table render gathered passages as a Markdown or CSV table whose quotations cannot drift from the passage they cite, and zotero_word_document writes a .docx whose citations are live Zotero field codes (docs/evidence-tables.md, docs/word-documents.md; refreshing the fields in Word is not yet verified).
Scans, several libraries, local embeddings.zotero_get_fulltext reads a PDF with no text layer through an optional OCR engine (docs/ocr.md); one data directory holds one search index per library and zotero_semantic_search can search several at once (docs/multiple-library-indexes.md); and ZOTEUS_EMBEDDINGS=ollama embeds through a local Ollama daemon with no API key (docs/ollama.md). zoteus index build runs a headless index build from the command line.
Agent support. 34 tools with structured outputs, MCP Resources and Prompts, and a generated tool tree for the code-execution-with-MCP pattern.
How it works
Install with one npx command, or the one-click .mcpb.
Connect by running the desktop app for key-free local access, or by pasting your Zotero API key.
Ask. Your MCP client can now search, cite, add to, and organize your library.
Zoteus detects a running Zotero desktop app and talks to it directly: the key-free local API for reads (full PDFs, saved-search results, the semantic-search index build), and the app itself for personal-library writes (imports, annotations, attachments, trash). The cloud Web API v3 is the fallback, and it is still required for sync, group libraries, and writes when the app is not running. Details: docs/writing.md.
Writing to a group library. Group writes always go to the cloud, even for a group the desktop app is holding and reading key-free: the app's write paths address your personal library and nothing else. They need ZOTERO_API_KEY with read/write access to that group, and a group whose settings let you edit its library. Address the group by the numeric library_id from zotero_groups (library_type:"group" alone is not enough), and take collection keys from that same group. See Group libraries.
Semantic search setup. The first zotero_semantic_search builds the library index in the background. On very large libraries you can also run zotero_index (action:"build") yourself, then poll action:"status" until it is done. The build pages your library through the same local-first path as every other read, so it needs no cloud API key while the desktop app is running. That covers your personal library and, on Zotero 10+, any group library the app holds; a key is needed when the app is closed, and for a group the app does not hold.
Embedding through an API on a large library. A full-text build of a 10k-item library is tens of thousands of requests, and at the default pacing the rate rides at OpenAI's tokens-per-minute ceiling whatever your tier. A rate-limited request backs off and retries rather than failing the build, and a build that still ends short keeps everything it indexed: run zotero_index action:"build" again and it resumes, embedding only the passages that have no vector yet (action:"refresh" is the one that starts over). To pace it up front, set ZOTEUS_EMBED_BATCH_SIZE=256 and ZOTEUS_EMBED_BATCH_DELAY_MS=8000. See docs/semantic-search.md.
Vector ranking is opt-in. Keyword (BM25) search works out of the box everywhere. On-device vectors need @huggingface/transformers, which the desktop-extension bundle cannot ship (the resolved dependency tree, onnxruntime's native binaries included, is about 700 MB): install it into a directory of its own (mkdir -p ~/.zoteus-deps && cd ~/.zoteus-deps && npm init -y && npm i @huggingface/transformers) and set ZOTEUS_TRANSFORMERS_PATH to ~/.zoteus-deps/node_modules. Not npm i -g: Claude Desktop runs the server on its own built-in Node, so a global install under a version manager sits next to a Node the extension never executes. When vectors are unavailable Zoteus says so in zotero_index status, zotero_whoami, and zotero_semantic_search rather than quietly returning nothing. See docs/semantic-search.md.
Configuration
Variable
Default
Purpose
ZOTERO_API_KEY
none
Cloud auth (sync, groups, writes without the desktop app; optional otherwise)
ZOTEUS_LOCAL
auto
auto|on|off: use the Zotero desktop app (reads + personal-library writes)
local|ollama|openai|gemini|off for semantic search
ZOTEUS_EMBEDDING_MODEL
provider default
The model that provider embeds with, local included: Xenova/multilingual-e5-small for a German or otherwise multilingual library, Xenova/all-MiniLM-L6-v2 by default
ZOTEUS_EMBEDDING_DTYPE
fp32
Weight precision of the on-device model: q8 downloads Xenova/multilingual-e5-small at 129 MB instead of 465 MB. Above fp32 it joins the embedder identity, so changing it needs one rebuild
ZOTEUS_EMBED_BATCH_SIZE
32
Passages per embedding call. Lower it if an API provider rejects a whole request (OpenAI answers 400 above 300K tokens per request)
ZOTEUS_EMBED_BATCH_DELAY_MS
0
Pause between embedding calls. Raise it if an API provider rate-limits a large build: 256 and 8000 together hold a full-text build near 400K tokens/min
ZOTEUS_INDEX_OWN_WORDS
true
Index your own child notes and PDF annotations as searchable passages
ZOTEUS_INDEX_FULLTEXT
false
Index PDF body text for semantic search (opt-in; costly)
ZOTEUS_INDEX_BACKEND
auto
auto|sqlite|memory: where the search index lives. auto uses SQLite (FTS5) on Node 22.13+, which is what a large library needs
ZOTEUS_TRANSFORMERS_PATH
none
Where to find @huggingface/transformers for local embeddings when the install can't see it (desktop extension)
ZOTEUS_LOG_FILE
none
Append every log line to this file, for a server that runs without a terminal
ZOTEUS_ALLOW_DELETE
false
Must be true or zotero_delete_items refuses every call; the tool stays listed unless ZOTEUS_READ_ONLY=true
Full table in docs/configuration.md. To run a shared or remote instance, see docs/remote-oauth.md (self-host the OAuth remote on loopback or behind your own proxy).
Zoteus writes everything it derives (the search index, the on-device model weights, the update-check cache, the granted local-API key) into one directory: ZOTEUS_DATA_DIR if you set it, otherwise your OS's default application-data path. Stop the server, remove it from your MCP client's configuration, then delete that directory; your Zotero library lives elsewhere and nothing here touches it. Full steps and platform paths: docs/uninstall.md.
Privacy
Zoteus runs on your machine or the server you configure. Usage logging is off by default. Tool results go to your chosen AI client, and enabled features contact Zotero and the scholarly, PDF, or embedding services they require. Full policy: PRIVACY.md.
Contributing
Contributions are welcome; see CONTRIBUTING.md. Zoteus is MIT licensed.
citeproc-js implements the Citation Style Language. (c) Frank Bennett, used under the Common Public Attribution License 1.0. https://citationstyles.org/ Dependency notices are collected in THIRD_PARTY_NOTICES.md.
Install
Configuration
Environment variables
ZOTERO_API_KEYsecret
Zotero API key (writes/sync/groups; optional for local-only reads).
ZOTEUS_LOCAL
Use the Zotero desktop local API: auto | on | off.
ZOTEUS_ALLOW_DELETE
Set to true to enable permanent deletion (off by default).