Is Zotero MCP Neo safe to use?

Zotero MCP Neo has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Zotero MCP Neo?

Zotero MCP Neo can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Zotero MCP Neo?

Zotero MCP Neo is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Is Zotero MCP Neo actively maintained?

Zotero MCP Neo is actively maintained — last commit was 8 days ago. It has 8 GitHub stars.

Zotero MCP Neo

A Zotero plugin that embeds a MCP server directly inside Zotero, giving AI assistants full read/write access to your reference library through 6 unified tools. 一个 Zotero 插件，在 Zotero 内部嵌入 MCP 服务器，让 AI 助手通过6 个统一工具完整访问你的文献库（读写均支持）。

ActiveNot tested

AI / ML

★ 8GitHub

28DNo CVEsactiveMIT

Quick Install

{
  "mcpServers": {
    "zotero-mcp-neo": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/zotero-mcp-neo)](https://mcppedia.org/s/zotero-mcp-neo)

Should you use this server?

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

MIT. View license →

✓

Is it maintained?

Last commit 8 days ago. 8 stars.

Will it work with my client?

Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Loading README…

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

28D

Last scored 14h ago

How we score →

Security

5/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✓

License — License: MIT

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Zotero MCP Neo safe to use?: Zotero MCP Neo has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Zotero MCP Neo?: Zotero MCP Neo can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Zotero MCP Neo?: Zotero MCP Neo is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.
Is Zotero MCP Neo actively maintained?: Zotero MCP Neo is actively maintained — last commit was 8 days ago. It has 8 GitHub stars.

Similar servers

View all →

Sequential Thinking MCP Server

OfficialNo CVEs98A

Dynamic problem-solving through sequential thought chains

1 toolsstdio84.0k112.2k/wk3d ago

XcodeBuildMCP

OfficialNo CVEs97A

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

2 toolsremote5.2k46.6k/wk1d ago

Python Sdk

OfficialNo CVEs95A

The official Python SDK for Model Context Protocol servers and clients

1 toolsremote22.7k166.4k/wk1d ago

Gemini Cli

No CVEs95A

An open-source AI agent that brings the power of Gemini directly into your terminal.

8 toolsremote101.5k891.1k/wk19h ago

MCP Security Weekly

Get CVE alerts and security updates for Zotero MCP Neo and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Search, Read, Write — Safely.
Drive your research workflow with natural language.

中文文档（简体）

Linux.do — Chinese community

A Zotero 7+ plugin (tested on Zotero 7, 8, and 9) that embeds a Streamable HTTP MCP server directly inside Zotero, giving AI assistants full read/write access to your reference library through 6 unified tools.

Based on the excellent cookjohn/zotero-mcp. The foundational plugin architecture, search engine, PDF processing, annotation extraction, semantic search, and more all originate from there. Neo builds upon this by consolidating the MCP API into 6 unified tools with a dryRun-first safety model. See Design Philosophy.

Screenshots


6 unified tools
Library structure browsing
Write operations
Paper import workflow
Settings
Skim library
Close reading

What's Different in Neo?

	Original	Neo
Tools	20+ individual tools	6 unified tools (`find` / `list` / `read` / `write` / `status` / `task`)
Output control	`mode` parameter	Explicit `sections` / `include` / `page`
Response	AI instruction wrappers	Raw data only
Write safety	Direct execution	dryRun-first + layered permissions

Everything else — search engine, PDF extraction, annotation handling, semantic search, client config generator — is inherited from the original project.

Quick Start

1. Install the Plugin

Download the latest .xpi from Releases
In Zotero → Tools → Add-ons → gear icon → Install Add-on From File...
Restart Zotero

After installation, Zotero’s built-in add-on updater can fetch newer versions from GitHub (the plugin ships an update_url pointing at the published update.json). Use Check for Updates in the Add-ons manager when you want to upgrade manually.

2. Enable the Server

Zotero → Edit → Settings → Zotero MCP Neo:

Check Enable Server
Default port: 23120

Write access: The default level is Create (new items and notes, organize collections). If you need move, delete, or full in-place edits, open Write Access in the same settings page and switch to Full or Custom.

3. Connect Your AI

You need both an MCP connection (so tools are available) and the Agent Skill (so the model follows safe write patterns). Do them in order:

Step 1: Configure MCP connection

Add this to your AI client's MCP configuration:

{
  "mcpServers": {
    "zotero-mcp-neo": {
      "transport": "streamable_http",
      "url": "http://127.0.0.1:23120/mcp"
    }
  }
}

Where to put this config

Client	Config location

... View full README on GitHub