Zoteus
Zoteus is an MCP server that gives Claude and other MCP clients access to a Zotero library: search, citations, adding items, safe writes, semantic search, and passages from PDFs.
npx -y @oscardvs/zoteus
What it does
Zoteus connects an MCP client such as Claude Desktop, Claude Code, or Cursor to your Zotero library. It exposes 30 tools, namespaced zotero_*, that search the library by keyword or by meaning, return passages from your PDFs with page locators, format bibliographies with citeproc-js in any CSL style, add items by DOI or arXiv id, and create, edit, tag, and organize items with reversible writes. When the Zotero desktop app is running, reads and personal-library writes go to it directly and need no cloud API key; the Zotero Web API v3 is the fallback for sync, group libraries, and for when the app is closed. Zoteus is written in TypeScript, runs on your machine, and is MIT licensed.
Install
For normal use there is nothing to download from GitHub: your MCP client fetches Zoteus with npx the first time it runs. If you are new to MCP servers, start with docs/getting-started.md.
| Client | Command |
|---|---|
| Claude Desktop (one-click) | download zoteus.mcpb from the latest release → double-click |
| Claude Code | claude mcp add --transport stdio zoteus -- npx -y @oscardvs/zoteus |
| Cursor / VS Code / Claude Desktop / Codex / Zed… | npx add-mcp @oscardvs/zoteus |
| claude.ai (web) | Add custom connector → your hosted URL (OAuth) |
Updating a desktop-extension install: manually installed extensions (
.mcpb, or the older.dxt) do not auto-update. Turn on Check for updates in the extension settings (or setZOTEUS_UPDATE_CHECK=true) and Zoteus asks GitHub once a day, then tells you in-chat viazotero_whoamiwhen a newer version exists; download the newzoteus.mcpband reinstall it to upgrade. The check is off by default.npxinstalls always run the latest published version.
A cloud API key is optional. Add one for sync, group libraries, and writes when the desktop app is not running; reads and personal-library writes work without a key against a running Zotero.
claude mcp add --transport stdio zoteus -e ZOTERO_API_KEY=xxxxx -- npx -y @oscardvs/zoteus
Get a key at zotero.org/settings/keys. For key-free local reads and writes, enable Settings → Advanced → "Allow other applications on this computer to communicate with Zotero" in the desktop app.
Features
- Search your own library. Hybrid keyword and semantic search over titles, abstracts, creators, and tags, plus full-text keyword search inside your PDFs and notes, with the matching passage returned together with its page number. Your own notes and PDF annotations are indexed under the item they belong to, so "where did I object to this?" is a question search can answer. Set
ZOTEUS_INDEX_FULLTEXT(or passfulltext:truetozotero_index) and semantic search also covers the body of every PDF, so a claim that never made it into an abstract is still findable. - Format citations. Zoteus reads the citation data in your Zotero library and formats it with citeproc-js in any CSL style from the CSL styles repository.
- Add a paper by identifier. Pass a DOI or arXiv id and Zoteus fetches the metadata and files the item. This works out of the box through built-in resolvers; a Zotero translation-server extends it to ISBN, PMID, and URLs (see
docs/resolver.md). - Write back. Create items, edit, tag, and organize. Writes are versioned with optimistic-locking retries, trash is reversible by default, and permanent deletion is opt-in and confirmation-gated.
- Write straight to the desktop app. Personal-library writes go to your running Zotero, with no cloud API key. On Zotero 10+ this uses the local API behind a key you grant once ("Always Allow"); on Zotero 9 and earlier, whose local API is read-only, it uses the connector protocol the browser extensions use. The cloud Web API is the fallback for group libraries and for when the app is not running.
- Annotate PDFs and attach files.
zotero_annotateadds highlights, underlines, and notes, the same objects the Zotero PDF reader creates. Quote the passage and Zoteus locates it in the PDF and anchors the annotation to the lines it occupies, wrapping and hyphenation included, so no page coordinates are needed.zotero_attach_filestores a local file or a URL as an attachment under any item. - Ground claims in the PDF.
zotero_get_fulltextreturns the relevant passage with character offsets, the nearest heading, and a page locator. When Zotero has not indexed the PDF or EPUB, it extracts the text on the fly, from the running desktop app or from Zotero's own storage folder, so a file added a minute ago is readable immediately. It also returns a PDF's table of contents (outline:true) and any page range on demand, so working through a 400-page book costs a few small calls rather than one that returns the whole book. - Follow the literature.
zotero_scholarlooks up a paper's references, citing works, and related works through OpenAlex, with Crossref as a fallback, and can flag which of them are already in your library. - Agent support. 30 tools with structured outputs, MCP Resources and Prompts, and a generated tool tree for the code-execution-with-MCP pattern.
How it works
- Install with one
npxcommand, or the one-click.mcpb. - Connect by running the desktop app for key-free local access, or by pasting your Zotero API key.
- Ask. Your MCP client can now search, cite, add to, and organize your library.
Zoteus detects a running Zotero desktop app and talks to it directly: the key-free local API for reads (full PDFs, saved-search results, the semantic-search index build), and the app itself for personal-library writes (imports, annotations, attachments, trash). The cloud Web API v3 is the fallback, and it is still required for sync, group libraries, and writes when the app is not running. Details: docs/writing.md.
Semantic search setup. The first
zotero_semantic_searchbuilds the library index in the background. On very large libraries you can also runzotero_index(action:"build") yourself, then poll action:"status" until it is done. The build pages your library through the same local-first path as every other read, so it needs no cloud API key while the desktop app is running. That covers your personal library and, on Zotero 10+, any group library the app holds; a key is needed when the app is closed, and for a group the app does not hold.
Embedding through an API on a large library. A full-text build of a 10k-item library is tens of thousands of requests, and at the default pacing the rate rides at OpenAI's tokens-per-minute ceiling whatever your tier. A rate-limited request now backs off and retries rather than failing the build, and a build that still ends short keeps everything it indexed: run
zotero_index action:"build"again and it resumes, embedding only the passages that have no vector yet (action:"refresh"is the one that starts over). To pace it up front, setZOTEUS_EMBED_BATCH_SIZE=256andZOTEUS_EMBED_BATCH_DELAY_MS=8000. Seedocs/semantic-search.md.
Vector ranking is opt-in. Keyword (BM25) search works out of the box everywhere. On-device vectors need
@huggingface/transformers, which the desktop-extension bundle cannot ship (the resolved dependency tree, onnxruntime's native binaries included, is about 700 MB): install it into a directory of its own (mkdir -p ~/.zoteus-deps && cd ~/.zoteus-deps && npm init -y && npm i @huggingface/transformers) and setZOTEUS_TRANSFORMERS_PATHto~/.zoteus-deps/node_modules. Notnpm i -g: Claude Desktop runs the server on its own built-in Node, so a global install under a version manager sits next to a Node the extension never executes. When vectors are unavailable Zoteus says so inzotero_indexstatus,zotero_whoami, andzotero_semantic_searchrather than quietly returning nothing. Seedocs/semantic-search.md.
Configuration
| Variable | Default | Purpose |
|---|---|---|
ZOTERO_API_KEY | none | Cloud auth (sync, groups, writes without the desktop app; optional otherwise) |
ZOTEUS_LOCAL | auto | auto|on|off: use the Zotero desktop app (reads + personal-library writes) |
ZOTEUS_LOCAL_API_KEY | none | Pre-provision the Zotero 10+ desktop write key (else granted once, in-app) |
ZOTEUS_EMBEDDINGS | local | local|openai|gemini|off for semantic search |
ZOTEUS_EMBEDDING_MODEL | provider default | The model that provider embeds with, local included: Xenova/multilingual-e5-small for a German or otherwise multilingual library, Xenova/all-MiniLM-L6-v2 by default |
ZOTEUS_EMBEDDING_DTYPE | fp32 | Weight precision of the on-device model: q8 downloads Xenova/multilingual-e5-small at 129 MB instead of 465 MB. Above fp32 it joins the embedder identity, so changing it needs one rebuild |
ZOTEUS_EMBED_BATCH_SIZE | 32 | Passages per embedding call. Lower it if an API provider rejects a whole request (OpenAI answers 400 above 300K tokens per request) |
ZOTEUS_EMBED_BATCH_DELAY_MS | 0 | Pause between embedding calls. Raise it if an API provider rate-limits a large build: 256 and 8000 together hold a full-text build near 400K tokens/min |
ZOTEUS_INDEX_OWN_WORDS | true | Index your own child notes and PDF annotations as searchable passages |
ZOTEUS_INDEX_FULLTEXT | false | Index PDF body text for semantic search (opt-in; costly) |
ZOTEUS_INDEX_BACKEND | auto | auto|sqlite|memory: where the search index lives. auto uses SQLite (FTS5) on Node 22.13+, which is what a large library needs |
ZOTEUS_TRANSFORMERS_PATH | none | Where to find @huggingface/transformers for local embeddings when the install can't see it (desktop extension) |
ZOTEUS_ALLOW_DELETE | false | Must be true to expose permanent deletion |
Full table in docs/configuration.md. To run a shared or remote instance, see docs/remote-oauth.md (self-host the OAuth remote on loopback or behind your own proxy).
Documentation
zoteus.com/docs · Getting started · Configuration · Import & resolver · Architecture · Safe writes · Citations · Semantic search · Scholarly context · Code execution · Deployment
Privacy
Zoteus runs locally, collects nothing, and has no telemetry. Your library data flows only between your machine and the services you configure (Zotero, and optionally scholarly-graph or embedding providers), directly and under your own keys. Full policy: PRIVACY.md.
Contributing
Contributions are welcome; see CONTRIBUTING.md. Zoteus is MIT licensed.
Acknowledgements
Built on the Model Context Protocol, the Zotero Web API, citeproc-js, and the Citation Style Language. Not affiliated with or endorsed by the Corporation for Digital Scholarship / Zotero.
