Observed MCP server

Zotero MCP

MCP server for local Zotero on Windows and WSL, enabling read access to items, collections, annotations, and notes via the Local API, and safe write operations through a plan/apply workflow with Web API verification.

Security score

—/100

Awaiting a completed comparable scan.

Seven-category assessment pending: authentication, tool poisoning, prompt injection, dangerous capabilities, dependency risk, data exfiltration, and transport security.

Score history

Pending

Immutable methodology-versioned snapshots

Schema drift

Pending

No normalized tool schema observed

Fingerprint

Pending

Repository/package-backed identity

Public findings

No public findings recorded

This is not a safety claim. Check the coverage and revision status before relying on absence of findings.