io.github.AnonymousOnyx22/bibtex-reference-manager-mcp
NPM · BIBTEX-REFERENCE-MANAGER-MCP
BibTeX reference manager. Parse, convert, dedupe, lint BibTeX, RIS, CSL JSON and make cite keys.
Available components
Last scanned (8 hours ago)
Scores higher than 48% of npm servers
Category Education and Research
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 3 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1051 tokens (~175/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 0
- Tool safety: pass → unverified ▼ security
- Stability: 0.17 → unverified ▼ security
- Schema quality: 840 → 1051 ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- Package version: 0.1.1 → 0.1.2 functional
- 31 Oct 26 +16
- Malware scan: unverified → pass ▲ security
- 30 Oct 26 −14
- Malware scan: pass → unverified ▼ security
- Schema quality: 123 → 168 ▼ functional
- Stability: unverified → 0.13 ▲ functional
- Schema quality: good → excellent functional
- Package version: 0.1.0 → 0.1.1 functional
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 26 Oct 26 55
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/bibtex-reference-manager-mcp@0.1.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 92 packages
| Packages resolved | 92 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
convert_bibliography Convert a bibliography ~187
Convert a reference list between BibTeX, RIS, CSL JSON and plain text (a simple reference list style, APA by default, or MLA or IEEE when you pass style). The input format is detected unless you pass it. Page ranges, DOIs and names are cleaned on the way. Example: text is a BibTeX entry and to is "ris", and output is the same reference as RIS. Set from only to override detection.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| style | string | – | The citation style for the text output: apa, mla or ieee. Defaults to apa. Ignored for the other formats. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| to | string | yes | The format to write. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | How many entries were converted. |
| from | string | yes | The format that was read. |
| output | string | yes | The converted reference list. |
| to | string | yes | The format that was written. |
No examples provided.
dedupe_entries Find duplicate entries ~191
Find duplicate references by matching DOI, by the same cite key, and by similar titles (the years must not clash). Each group says which entry to keep, the one with the most fields, and which to remove. Also returns the list as BibTeX with the extra copies dropped. Example: two entries with the same DOI, one with 3 fields and one with 6, give one group that keeps the entry with 6 fields and lists the other under remove. Your files are not changed.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| title_threshold | number | – | How alike two titles must be to count as the same, from 0.5 to 1. Defaults to 0.9. |
| Name | Type | Req | Description |
|---|---|---|---|
| deduplicated_bibtex | string | yes | The list as BibTeX without the removed copies. |
| groups | array | yes | – |
| total | number | yes | How many entries were read. |
| unique | number | yes | How many entries are left once the duplicates are dropped. |
No examples provided.
fix_entries Fix entries ~170
Apply the safe fixes that lint_entries points to and return the cleaned list as BibTeX: page ranges with one hyphen get a double hyphen, titles that start with a lower case letter or are all lower case get capitals (words inside braces are left alone), and DOIs written as a link or with a doi: prefix become bare DOIs. Missing fields, backwards page ranges and DOIs that are not valid are not guessed, so run lint_entries on the result. Example: pages "12-15" becomes "12--15". Your files are not changed.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| Name | Type | Req | Description |
|---|---|---|---|
| bibtex | string | yes | The cleaned list as BibTeX. |
| count | number | yes | How many entries were read. |
| fixed | number | yes | How many changes were made. |
| fixes | array | yes | – |
No examples provided.
generate_cite_keys Generate cite keys ~196
Create consistent cite keys from the first author's family name, the year and the first meaningful word of the title, like smith2024deep. Repeated keys get a letter added. Returns the old and new key for each entry and the list as BibTeX with the new keys. Example: an entry with key old1, author "Smith, John", year 2024 and title "Deep Learning for Graphs" gives old_key old1 and new_key smith2024deep, or smith2024 when include_title_word is false.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| include_title_word | boolean | – | Add the first meaningful title word, so you get smith2024deep and not smith2024. Defaults to true. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| Name | Type | Req | Description |
|---|---|---|---|
| bibtex | string | yes | The list as BibTeX using the new keys. |
| count | number | yes | – |
| keys | array | yes | – |
No examples provided.
lint_entries Lint entries ~138
Check a reference list for problems: missing required fields for the entry type, bad page ranges, titles that are not capitalized, invalid DOIs, odd years and repeated keys. Each issue names the entry key, the field and a plain message. Example: an @article with no journal field gives an issue with the rule missing-field and the field journal. Pass the whole list as text so repeated keys can be found.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | How many entries were checked. |
| errors | number | yes | – |
| issues | array | yes | – |
| warnings | number | yes | – |
No examples provided.
parse_bibliography Parse a bibliography ~169
Read BibTeX, RIS or CSL JSON text and return the entries in one normalized shape: lower case field names, tidy whitespace, bare DOIs, the year filled in from a date, and authors split into "Family, Given". Nothing is sent anywhere. Example: text "@article{k1, AUTHOR = {John Smith and Jane Doe}, title={Deep Learning for Graphs}, year={2024}}" returns one entry with authors ["Smith, John", "Doe, Jane"] and lower case field names. Leave format out unless auto picks the wrong one.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | The format of the text. Defaults to auto, which looks at the text to decide. |
| text | string | yes | The reference list as text: BibTeX, RIS or CSL JSON. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | How many entries were found. |
| entries | array | yes | – |
| format | string | yes | The format that was read: bibtex, ris or csl_json. |
No examples provided.
How do I install the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp runs locally as an npm package, launched with npx -y bibtex-reference-manager-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · bibtex-reference-manager-mcp
claude mcp add anonymousonyx22-bibtex-reference-manager-mcp -- npx -y bibtex-reference-manager-mcp
What is the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp is listed in the public MCP registry as io.github.AnonymousOnyx22/bibtex-reference-manager-mcp. BibTeX reference manager. Parse, convert, dedupe, lint BibTeX, RIS, CSL JSON and make cite keys. This page covers its npm package (bibtex-reference-manager-mcp).
Is the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server safe to use?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server expose?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp exposes 6 tools: parse_bibliography, convert_bibliography, dedupe_entries, lint_entries, fix_entries, generate_cite_keys. Their descriptions and schemas cost roughly 1,051 tokens of context every time the server is loaded.
Is the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server still maintained?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.AnonymousOnyx22/bibtex-reference-manager-mcp server under?
io.github.AnonymousOnyx22/bibtex-reference-manager-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.