Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.cyanheads/zenodo-mcp-server

REMOTE · ZENODO.CASEYJHAND.COM · 2 COMPONENTS

Search and resolve Zenodo datasets, software, and publications by DOI; trace versions and funding.

+3 this week 87 Trust /100

Last scanned (3 hours ago)

Scores higher than 94% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Education and Research

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
Transport & Reachability100
Schema Quality & AI Usability75
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2909 tokens (~415/item across 7 items; 6 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 +3
    • Schema quality: 475 → 415 ▲ functional
    • First check of Schema quality: 100 functional
    • New resource “zenodo-guide” functional
    • Server version: 0.1.4 → 0.2.0 functional
  • 26 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 0
    • Server version: 0.1.3 → 0.1.4 functional
  • 24 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://zenodo.caseyjhand.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=caseyjhand.com CN=WE1,O=Google Trust Services,C=US 2 Nov 2026 31 Jan 2027 ECDSA 256 ECDSA-SHA256 995a30681ab772540e934241ca1d576c
SANs: caseyjhand.com, *.caseyjhand.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of zenodo.caseyjhand.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
caseyjhand.com. present 2371 13 Verified
zenodo.caseyjhand.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
x-content-type-options nosniff

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://zenodo.caseyjhand.com/mcp Verified 200
http (plaintext) http://zenodo.caseyjhand.com/mcp HTTPS enforced 301 https://zenodo.caseyjhand.com/mcp
MCP tools · 6 exposed · ~2,682 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
zenodo_get_record ~474

Resolve one Zenodo deposit from a record id, a Zenodo DOI (10.5281/zenodo.N), a concept DOI or concept record id (resolves to the latest version), another DOI deposited on Zenodo, or a zenodo.org or doi.org URL, and return its full metadata: description, creators with ORCIDs and ROR affiliations, license, access and embargo, funding and grants, related identifiers, communities, version position, usage counts, and the first 25 files. Optionally includes a formatted citation. Long text and lists are cut at display caps with their totals reported; every cut except the file list (paged with zenodo_list_files) is listed in continuations with a cursor and the record id it is bound to, and passing both back returns the next window of that field (8,000 characters of text, or the next page of entries) in place of the record. A miss (an unknown id, a deleted record with its removal tombstone, restricted metadata, or a DOI not registered on Zenodo) returns found: false with guidance instead of an error.

NameTypeReqDescription
citation_stylestring–Include a formatted citation of the resolved version: bibtex, csl-json, or a text style (apa, chicago-author-date, harvard-cite-them-right, ieee, modern-language-association, nature). Case, spaces, h…
cursorstring–A continuations[].cursor from an earlier zenodo_get_record response, passed unchanged with that continuation’s id as id. Returns that field’s next window (8,000 characters of text, or the next page o…
idstringyesThe deposit to resolve: a record id (22705923), a Zenodo DOI (10.5281/zenodo.22705923, doi: prefix and any case accepted), a concept DOI or concept record id such as 10.5281/zenodo.591564 (resolves t…
NameTypeReqDescription
capnumber–Without cursor: maximum file entries shown (25). With cursor: the window size (8,000 characters, or the field’s page of entries).
citationstring–The formatted citation. Present when requested and found.
citation_stylestring–The citation style used. Present with citation.
continuationsarray–Every field this response cut short, each with a cursor for the rest. Absent when nothing was cut; files are paged with zenodo_list_files instead.
errorobject–Present when the call failed. Absent on success.
foundboolean–True when the record resolved.
guidancestring–What to do next. Present when not found.
input_kindstring–How id was parsed: record_id (digits), zenodo_doi (10.5281/zenodo.N or zenodo.N), external_doi (another DOI), or url (a zenodo.org or doi.org link).
miss_kindstring–Why nothing resolved. Present when not found.
noticestring–File access notes or a pointer to zenodo_list_files.
recordobject–The record. Present when found and no cursor was passed.
resolved_fromstring–How the record was reached: a version id, a concept id resolved to the latest version, or a non-Zenodo DOI. Present when found.
shownnumber–Without cursor: file entries shown. With cursor: characters or entries in the window.
tombstoneobject–Removal tombstone. Present when miss_kind is deleted.
truncatedboolean–Without cursor: true when anything was cut, files past the 25 shown or any field in continuations. With cursor: true when continuations lists a next step, because the field continues past this window…
windowobject–The next window of the field the cursor continues. Present when found and a cursor was passed, in place of record.

No examples provided.

zenodo_list_files ~259

Page through a Zenodo deposit's file manifest (key, size, MIME type, MD5, download URL, previewability), optionally filtered by a substring of the file key, or list the members inside one of its .zip files by setting archive_key. Restricted and embargoed files return the access status and embargo date with no entries. Read a small text file or ZIP member with zenodo_read_file.

NameTypeReqDescription
archive_keystring–Exact file key of a .zip in this record (from the manifest) to list its members instead of the manifest. Omit to list the manifest.
idstringyesThe deposit: a record id (22705923), a Zenodo DOI (10.5281/zenodo.22705923), another DOI registered to a Zenodo record, or a zenodo.org/records or doi.org URL. A concept id lists the latest version’s…
key_containsstring–Case-insensitive substring filter on file keys (manifest) or member paths (archive), applied before paging.
limitinteger–Entries per page, at most 200 per call; larger values return 200.
offsetinteger–Entries to skip before this page.
NameTypeReqDescription
access_statusstring–Record access status: open, restricted, embargoed, or metadata-only.
archiveobject–The archive being listed (archive kind); absent when files are restricted.
capnumber–Page size applied (at most 200).
embargo_untilstring–Embargo end date, when an embargo is active.
entriesarray–Manifest files on this page (manifest kind); empty when files are restricted.
errorobject–Present when the call failed. Absent on success.
file_countnumber–Total files in the record (manifest kind); absent when files are restricted or embargoed.
files_accessstring–File access: public or restricted; absent when Zenodo does not report it.
files_enabledboolean–False for a metadata-only deposit.
has_moreboolean–True when more matching entries follow this page.
key_containsstring–The key filter applied, when set.
kindstring–manifest: the record’s files; archive: members of the .zip named by archive_key.
limitnumber–Page size applied: limit, or 200 when limit asked for more.
matchednumber–Entries matching the filter, before paging.
membersarray–Archive members on this page (archive kind); empty when files are restricted.
next_offsetnumber–Offset of the next page, when has_more.
noticestring–File access notes, empty-filter guidance, listing caps, the 200-per-call limit cap, or paging guidance.
offsetnumber–Entries skipped before this page.
recidstring–Record id whose files are listed (the latest version for a concept id).
shownnumber–Entries returned on this page.
totalCountnumber–Entries matching the filter, before paging.
total_bytesnumber–Total size of the record’s files in bytes (manifest kind); absent when files are restricted or embargoed.
truncatedboolean–True when more matching entries follow this page.

No examples provided.

zenodo_list_versions ~272

List every version of a Zenodo deposit's version series, newest first, with each version's record id, DOI, version label, publication date, file totals, and usage counts. Accepts any identifier zenodo_get_record accepts; a concept DOI and any single version's DOI list the same series. Use it to find the version a paper cited or the current release. A miss (an unknown id, a deleted record with its removal tombstone, restricted metadata, or a DOI not registered on Zenodo) returns found: false with guidance instead of an error.

NameTypeReqDescription
idstringyesAny version or concept identifier of the deposit: a record id (22705923), a Zenodo DOI (10.5281/zenodo.22705923) or concept DOI (10.5281/zenodo.591564), another DOI registered to a Zenodo record, or…
pageinteger–Result page, starting at 1. Zenodo pages through only the first 10,000 versions, so the last reachable page is 10,000 ÷ size rounded up (400 at size 25).
sizeinteger–Versions per page, at most 25 per call; larger values return 25.
NameTypeReqDescription
capnumber–Page size applied (at most 25).
concept_doistring–Concept DOI of the series, when minted; absent when not found or on a page past the end.
concept_recidstring–Concept record id naming the whole series; absent when not found or on a page past the end.
errorobject–Present when the call failed. Absent on success.
foundboolean–True when the version series resolved.
guidancestring–What to do next. Present when not found.
has_moreboolean–True when another page of versions follows.
input_kindstring–How id was parsed: record_id (digits), zenodo_doi (10.5281/zenodo.N or zenodo.N), external_doi (another DOI), or url (a zenodo.org or doi.org link).
latest_recidstring–Record id of the newest version. Present when found, unless Zenodo cannot name it for a page past the end.
miss_kindstring–Why nothing resolved. Present when not found.
next_pagenumber–The next page number, when has_more.
noticestring–Guidance on paging, the 25-per-call size cap, or a page past the end.
pagenumber–Page returned.
shownnumber–Versions returned on this page.
sizenumber–Page size applied: size, or 25 when size asked for more.
tombstoneobject–Removal tombstone. Present when miss_kind is deleted.
totalCountnumber–Number of versions in the series.
total_versionsnumber–Number of versions in the series. Present when found.
truncatedboolean–True when more versions follow this page.
versionsarray–Versions on this page, newest first; empty when not found.

No examples provided.

zenodo_lookup_vocabulary ~347

Resolve names to the ids zenodo_search_records filters on, and browse Zenodo's reference vocabularies: communities (slug), funders (ROR id), awards and grants (award id), licenses (license id), and resource types (type id). Search by name, acronym, or keyword; awards can be scoped to one funder. Each entry names the zenodo_search_records parameter its id feeds.

NameTypeReqDescription
funderstring–awards only: scope grants to one funder, given as a ROR id (00k4n6c32), a ROR URL, or a Crossref Funder DOI (10.13039/100000002). Resolve a funder name to its ROR id with vocabulary funders first.
pageinteger–Result page, starting at 1. Only the first 10,000 entries of a list are reachable, so the last reachable page is 10,000 ÷ size rounded up (400 at size 25).
querystring–Name, acronym, or keyword, e.g. "SYMBA", "wellcome", "mit", "journal article". For resource_types every word must appear in the type id or label. Omit to browse the vocabulary.
sizeinteger–Entries per page, at most 25 per call; larger values return 25.
vocabularystringyesWhich vocabulary to search: communities, funders, awards (grants), licenses, or resource_types. Case, spaces, hyphens, and underscores are ignored when matching, and the singular (funder, license, re…
NameTypeReqDescription
capnumber–Page size applied (at most 25).
entriesarray–Matching entries for this page.
errorobject–Present when the call failed. Absent on success.
has_moreboolean–True when another page of reachable entries follows.
next_pagenumber–The next page number, when has_more.
noticestring–Guidance on empty results, ambiguous funders, the 10,000-entry window, the 25-per-call size cap, or further pages.
pagenumber–Page returned.
querystring–The query as applied; absent when browsing.
reachablenumber–Entries reachable by paging: min(total, 10,000).
shownnumber–Entries returned on this page.
sizenumber–Page size applied: size, or 25 when size asked for more.
totalnumber–Total entries matching the query.
totalCountnumber–Total entries matching the query.
truncatedboolean–True when more reachable entries follow this page.
vocabularystring–The vocabulary searched.

No examples provided.

zenodo_read_file ~342

Read a bounded UTF-8 excerpt (up to 64 KiB per call) of one text file in a Zenodo deposit — a README, CITATION.cff, CSV head, notebook, or script — or of one member inside a .zip file, without downloading the archive. Continue a top-level file from next_offset. A file with a text MIME type or extension is read directly; an extensionless file Zenodo types application/octet-stream (LICENSE, COPYING, Makefile) is read and returned only when its content is UTF-8 text. Binary files, restricted files, and other types return metadata and the download URL without content. File content is depositor-supplied and carries the deposit’s license.

NameTypeReqDescription
archive_memberstring–Member path inside the .zip named by key (from zenodo_list_files with archive_key). Omit to read the file itself.
idstringyesThe deposit: a record id (22705923), a Zenodo DOI (10.5281/zenodo.22705923), another DOI registered to a Zenodo record, or a zenodo.org/records or doi.org URL. A concept id reads from the latest vers…
keystringyesExact file key from zenodo_list_files, e.g. README.md or data/results.csv.
max_bytesinteger–Maximum bytes to read (256 or more), at most 65536 per call; larger values return 65536.
offset_bytesinteger–Byte offset to start reading a top-level file at; use next_offset to continue. Must be 0 for an archive member.
NameTypeReqDescription
archive_memberstring–The archive member path, when one was read.
bytes_returnednumber–Exact bytes the excerpt covers (cut at a line or character boundary).
download_urlstring–Direct download URL of the top-level file (the .zip itself for a member).
errorobject–Present when the call failed. Absent on success.
file_sizenumber–Size of the file or member in bytes, when known.
files_accessstring–File access: public or restricted; absent when Zenodo does not report it.
has_moreboolean–True when bytes remain past this excerpt.
keystring–The file key.
md5string–MD5 checksum of the top-level file (hex); absent for archive members and when not reported.
mimetypestring–MIME type of the file or member, when reported.
next_offsetnumber–offset_bytes for the next window of a top-level file, when has_more; absent for an archive member, which cannot be continued past its first window.
noticestring–Why no text was returned, or how to read the rest of the file, naming the 65,536-byte cap when it held back bytes.
offset_bytesnumber–Byte offset the excerpt starts at.
recidstring–Record id read from (the latest version for a concept id).
record_urlstring–Record landing page on zenodo.org.
replacement_charsnumber–U+FFFD characters in the excerpt (invalid UTF-8 or a mid-character offset).
rightsarray–The deposit’s licenses, which the file carries.
statusstring–text: content returned; not_text: binary content, or a type that is not read as text; restricted: the content is not available anonymously — the record’s files are restricted or embargoed (key is not…
textstring–The excerpt, decoded as UTF-8. Depositor-supplied data. Present when status is text.

No examples provided.

zenodo_search_records ~988

Search Zenodo's open research repository — datasets, software releases, publications, and other deposits — by keyword query plus filters for resource type, community, funder, grant, creator ORCID, file type, license, access status, and publication date. Returns one summary per deposit (ids, DOIs, title, type, version, creators, license, access, file totals, usage counts) plus facet counts over the full match set, every filter applied. Query terms are OR-ed unless joined with AND, quoted phrases match exactly, and field syntax works on record fields (metadata.title:"…", metadata.subjects.subject:"…"). Only the latest version of each deposit is searched unless all_versions is true, and only the first 10,000 matches are reachable by paging. Resolve community, funder, and grant names to ids with zenodo_lookup_vocabulary first; open one deposit in full with zenodo_get_record.

NameTypeReqDescription
access_statusstring–Access status: open, restricted, embargoed, or metadata-only. Case, spaces, hyphens, and underscores are ignored when matching (Metadata Only reads as metadata-only).
all_versionsboolean–Include superseded versions; by default only the latest version is searched.
awardstring–One grant: an award id <funder-ror>::<number> (00k4n6c32::101135562), a bare grant number, or a CORDIS award DOI (10.3030/101135562). Find ids with zenodo_lookup_vocabulary (vocabulary: awards).
communitystring–One community: its slug, UUID, or zenodo.org/communities/<slug> URL. Find slugs with zenodo_lookup_vocabulary (vocabulary: communities).
creator_orcidstring–Creator ORCID iD, e.g. 0000-0002-1825-0097; an https://orcid.org/ prefix is stripped and a trailing x uppercased.
file_typearray–File extensions, OR-ed (a single string is accepted): csv, zip, pdf, … Lowercased with any leading dot stripped.
funderstring–One funder: a ROR id (01cwqze88), a ROR URL, or a Crossref Funder DOI (10.13039/100000002). Resolve a funder name with zenodo_lookup_vocabulary (vocabulary: funders).
licensestring–License id, e.g. cc-by-4.0, cc0-1.0, mit (lowercased). Find ids with zenodo_lookup_vocabulary (vocabulary: licenses).
pageinteger–Result page, starting at 1. Only the first 10,000 matches are reachable, so the last reachable page is 10,000 ÷ size rounded up (400 at size 25).
published_fromstring–Earliest publication date, YYYY, YYYY-MM, or YYYY-MM-DD; a partial date starts at its first day.
published_tostring–Latest publication date, YYYY, YYYY-MM, or YYYY-MM-DD; a partial date ends at its last day.
querystring–Keyword query. Terms are OR-ed unless joined with AND; "quoted phrases" (double quotes) match exactly; field syntax such as metadata.title:"…" or doi:"10.5281/zenodo.N" works. Escape a literal / as \…
resource_typearray–Resource type ids, OR-ed (a single string is accepted): dataset, software, publication, publication-article, image-photo, … Any case; a subtype may also be written in the <type>::<id> form zenodo_loo…
sizeinteger–Results per page, at most 25 per call; larger values return 25.
sortstring–Sort order: bestmatch, newest, oldest, mostviewed, mostdownloaded, updated-desc, updated-asc. Case, spaces, hyphens, and underscores are ignored when matching (MostViewed reads as mostviewed). Defaul…
NameTypeReqDescription
allVersionsboolean–Whether superseded versions were searched.
appliedSortstring–The sort order applied.
capnumber–Page size applied (at most 25).
effectiveQuerystring–The exact q sent to Zenodo.
errorobject–Present when the call failed. Absent on success.
facetsobject–Facet counts over the full match set (every filter applied, so they agree with total), not just this page.
has_moreboolean–True when another reachable page follows.
hitsarray–Matching deposits on this page.
next_pagenumber–The next page number, when has_more.
noticestring–Guidance on a query Zenodo matched as plain text, empty results, the 10,000-result window, the 25-per-call size cap, or further pages.
pagenumber–Page returned.
reachablenumber–Matches reachable by paging: min(total, 10,000).
shownnumber–Hits returned on this page.
sizenumber–Page size applied: size, or 25 when size asked for more.
totalnumber–Exact number of matching records.
totalCountnumber–Exact number of matching records.
truncatedboolean–True when more reachable matches follow this page.

No examples provided.

Install

How do I install the io.github.cyanheads/zenodo-mcp-server server?

io.github.cyanheads/zenodo-mcp-server is a hosted endpoint at https://zenodo.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · zenodo.caseyjhand.com

# add to Claude Code
claude mcp add --transport http cyanheads-zenodo-mcp-server 'https://zenodo.caseyjhand.com/mcp'
Common questions

What is the io.github.cyanheads/zenodo-mcp-server server?

io.github.cyanheads/zenodo-mcp-server is listed in the public MCP registry as io.github.cyanheads/zenodo-mcp-server. Search and resolve Zenodo datasets, software, and publications by DOI; trace versions and funding. This page covers its hosted endpoint (https://zenodo.caseyjhand.com/mcp).

Is the io.github.cyanheads/zenodo-mcp-server server safe to use?

io.github.cyanheads/zenodo-mcp-server scores 87 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.cyanheads/zenodo-mcp-server server expose?

io.github.cyanheads/zenodo-mcp-server exposes 6 tools: zenodo_search_records, zenodo_get_record, zenodo_list_versions, zenodo_list_files, zenodo_read_file, zenodo_lookup_vocabulary. Their descriptions and schemas cost roughly 2,682 tokens of context every time the server is loaded.

Does the io.github.cyanheads/zenodo-mcp-server server require authentication?

No. We connected to io.github.cyanheads/zenodo-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.cyanheads/zenodo-mcp-server server still maintained?

io.github.cyanheads/zenodo-mcp-server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.