# io.github.oscardvs/zoteus (npm · @oscardvs/zoteus)

The everything Zotero MCP server — Web API v3 + local API, safe writes, citations, search.

- Trust score: 74/100 (medium)
- Change this week: +26
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mcp.zoteus.com`: 36/100, [markdown](https://verifymcp.io/servers/oscardvs-zoteus/mcp.md), [page](https://verifymcp.io/servers/oscardvs-zoteus/mcp)
- npm · `@oscardvs/zoteus`: 74/100 (this document), [markdown](https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus.md), [page](https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus)

## Channel facts

- Registry: `npm`
- Package: `@oscardvs/zoteus`
- Version: `1.0.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 88/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (109 of 110), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (109 of 110), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to oscardvs/zoteus).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 13 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 73/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 5576 tokens (~185/item across 30 items; 28 tools + 2 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 84/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 51% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add oscardvs-zoteus -- npx -y @oscardvs/zoteus
```

### Codex

```bash
codex mcp add oscardvs-zoteus -- npx -y @oscardvs/zoteus
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "oscardvs-zoteus": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@oscardvs/zoteus"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add oscardvs-zoteus --command npx --arg -y --arg @oscardvs/zoteus
```

### Hermes

```yaml
mcp_servers:
  oscardvs-zoteus:
    command: "npx"
    args: ["-y", "@oscardvs/zoteus"]
```

### Other

```json
{
  "mcpServers": {
    "oscardvs-zoteus": {
      "command": "npx",
      "args": [
        "-y",
        "@oscardvs/zoteus"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 74, +51)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] The attested source repository moved: oscardvs/zoteus
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-07-31 (score 23, +17)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −42)

- [security regression] Malware scan: pass → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-27 (score 48)

First indexed and scored.

## MCP tools (28)

### `zotero_whoami` (~99 tokens)

Zotero identity & access

Resolve the current Zotero identity (userID, username, display name) and per-library access scopes from the configured API key, and report which library backends are available (cloud Web API and/or the desktop local API). Call this first to discover the userID — never ask the user to type a numeric ID. If no API key is configured, the server runs in local-only read mode against the desktop library (users/0).

### `zotero_search_items` (~437 tokens)

Search Zotero items

Search or list items in a Zotero library or collection. Supports full-text/quick search via `q` (`qmode`: titleCreatorYear=default, everything=includes notes & attachment full text), boolean `itemType` filters (use `||` for OR, repeat or `&&` for AND, leading `-` to negate, e.g. "journalArticle || book", "-attachment"), boolean `tag` filters (same syntax; escape a literal leading hyphen as "\-"), `since` (version) for incremental queries, `sort`/`direction`, and `limit`/`start` paging. Set `response_format` to "detailed" to also return technical fields (version, tags, collections, DOI, url) needed before chaining a write; the default "concise" returns high-signal projections (key, itemType, title, creators, date). Reads are served from the fast desktop local API when available, otherwise the cloud Web API. Returns `totalResults` so you can tell when to page rather than assuming you saw everything. For conceptual/"papers about X" queries by meaning rather than exact fields, use zotero_semantic_search instead.

Input parameters:

- `collectionKey` (string): Restrict to a collection by key.
- `direction` (string)
- `includeTrashed` (boolean)
- `itemType` (string): Boolean itemType filter, e.g. "journalArticle || book".
- `library_id` (integer)
- `library_type` (string)
- `limit` (integer): Max items (default 25, max 100).
- `q` (string): Quick/full-text search string.
- `qmode` (string)
- `response_format` (string): Detail level of returned items.
- `since` (integer): Return items modified after this library version.
- `sort` (string)
- `start` (integer)
- `tag` (string): Boolean tag filter, e.g. "to-read && 2024".
- `top` (boolean): Only top-level items (exclude child notes/attachments).

### `zotero_get_item` (~243 tokens)

Get a Zotero item

Fetch one item by its key, returning the full item record (itemType, all bibliographic fields, creators, tags, collections, relations, version). Optionally set `include_children` to also return the item's child notes and attachments. Use `include` to additionally request rendered output: "bib" (formatted bibliography entry), "citation" (inline citation), or "csljson" (CSL-JSON for downstream formatting); combine with `style` (a CSL style id, default chicago-note-bibliography) and `locale`. The returned `version` is required if you later update or delete this item.

Input parameters:

- `include` (string): Extra rendered content: "bib", "citation", or "csljson".
- `include_children` (boolean): Also fetch child notes/attachments.
- `item_key` (string, required): The 8-character Zotero item key.
- `library_id` (integer)
- `library_type` (string)
- `locale` (string): Locale for bib/citation, e.g. en-US.
- `style` (string): CSL style id for bib/citation (default chicago-note-bibliography).

### `zotero_schema` (~118 tokens)

Zotero data model (types & fields)

Return the Zotero data model so you never hardcode item shapes. With no arguments, returns the schema version and the list of all item type names. With `item_type`, returns the valid fields and creator types for that type (the "primary" creator type is listed first). Use this to validate an item before creating or updating it: notes, attachments, and annotations are item types too but bypass the normal field/creator model.

Input parameters:

- `item_type` (string): If set, return the fields & creator types for this item type.

### `zotero_create_items` (~225 tokens)

Create or update Zotero items

Create new items or update existing ones in a single batch (the server auto-chunks into groups of 50). Each entry in `items` is a Zotero item-data object: include `itemType` plus its valid fields, `creators` (each `{creatorType, firstName, lastName}` or `{creatorType, name}`), `tags` (`[{tag}]`), and `collections` (array of collection keys). To UPDATE an existing item, also include its `key` and current `version`; to CREATE, omit both. Every item is validated against the Zotero schema before anything is sent — if any item is invalid, nothing is written and the problems are returned. Use zotero_schema to discover valid fields/creator types for an itemType. Writes go to the cloud Web API (requires ZOTERO_API_KEY).

Input parameters:

- `items` (array, required): Array of Zotero item-data objects (itemType + fields; include key+version to update).
- `library_id` (integer)
- `library_type` (string)

### `zotero_update_item` (~251 tokens)

Update a Zotero item

Partially update one item (HTTP PATCH — only the fields you supply change; omitted fields are preserved). Provide `item_key` and a `patch` object of the fields to change (e.g. {"title":"New","extra":"note"} or {"tags":[{"tag":"reviewed"}]}). Optimistic concurrency is handled for you: if you pass the item's `version` it is used; otherwise the current version is fetched first. If the item changed on the server in the meantime (412), the update is automatically re-fetched and retried once. Writes go to the cloud Web API. Set `dry_run:true` to preview the field-level before→after diff without writing (arrays like tags/collections are replaced wholesale by PATCH, not merged; a dry_run call performs no write).

Input parameters:

- `dry_run` (boolean): Preview the field-level before→after diff without writing.
- `item_key` (string, required): The 8-character item key.
- `library_id` (integer)
- `library_type` (string)
- `patch` (object, required): Object of fields to change (PATCH semantics).
- `version` (integer): Known current version; fetched automatically if omitted.

### `zotero_trash_items` (~147 tokens)

Trash or restore Zotero items

Move items to the trash (the safe, REVERSIBLE default) or restore them. This sets the `deleted` flag (1=trash, 0=restore) — it is NOT a permanent delete, so trashed items can be recovered here or in the Zotero app. Use this instead of zotero_delete_items unless you truly need irreversible removal. Provide `item_keys` and optional `action` (default "trash"). Writes go to the cloud Web API.

Input parameters:

- `action` (string): Default "trash".
- `item_keys` (array, required): Item keys to trash or restore.
- `library_id` (integer)
- `library_type` (string)

### `zotero_delete_items` (~143 tokens)

Permanently delete Zotero items

PERMANENTLY and IRREVERSIBLY delete items by key (this purges them — it is NOT the trash). Prefer zotero_trash_items, which is reversible. This tool is disabled unless the server is started with ZOTEUS_ALLOW_DELETE=true, and additionally requires `confirm: true` on every call. The current library version is used as a precondition; the operation auto-chunks to 50 keys per request.

Input parameters:

- `confirm` (boolean): Must be true to proceed with permanent deletion.
- `item_keys` (array, required): Item keys to permanently delete.
- `library_id` (integer)
- `library_type` (string)

### `zotero_manage_collections` (~246 tokens)

Manage Zotero collections

List, create, rename, reparent, or delete collections, and move items into or out of a collection. Set `action` to one of: "list" (all collections with key/name/parent), "create" (needs `name`, optional `parent_collection` key — omit for top-level), "rename" (needs `collection_key` + `name`), "reparent" (needs `collection_key`; `parent_collection` key, or omit to move to top level), "delete" (needs `collection_key`), "add_items" / "remove_items" (need `collection_key` + `item_keys`; collection membership lives on each item). All actions except "list" write to the cloud Web API.

Input parameters:

- `action` (string, required)
- `collection_key` (string): Target collection key (all actions except list/create).
- `item_keys` (array): Item keys (add_items/remove_items).
- `library_id` (integer)
- `library_type` (string)
- `name` (string): Collection name (create/rename).
- `parent_collection` (string): Parent collection key; omit for top-level.

### `zotero_manage_tags` (~168 tokens)

Manage Zotero tags

List tags, or add/remove tags on items. Set `action` to "list" (returns library tags; supports `q` substring filter), "add" (add `tags` to each of `item_keys`), or "remove" (remove `tags` from each of `item_keys`). Tags are stored on the parent item's tag array, so add/remove edits the items (cloud Web API). Tag names are case-sensitive.

Input parameters:

- `action` (string, required)
- `item_keys` (array): Items to modify (add/remove).
- `library_id` (integer)
- `library_type` (string)
- `limit` (integer)
- `q` (string): Substring filter for list.
- `tags` (array): Tag names to add or remove.

### `zotero_saved_searches` (~180 tokens)

Manage Zotero saved searches

List, create, or delete saved-search DEFINITIONS. NOTE: the Zotero cloud Web API stores saved searches but does NOT execute them — to get the items a saved search matches, run an equivalent zotero_search_items query (or use the desktop local API when available). Set `action` to "list" (all saved searches with their conditions), "create" (needs `name` and `conditions`, each `{condition, operator, value}`), or "delete" (needs `search_key`). Writes go to the cloud Web API.

Input parameters:

- `action` (string, required)
- `conditions` (array): Search conditions (create).
- `library_id` (integer)
- `library_type` (string)
- `name` (string): Saved-search name (create).
- `search_key` (string): Saved-search key (delete).

### `zotero_groups` (~71 tokens)

List Zotero groups

List the group libraries the current API key can access, with each group's id, name, type, item count, and edit permissions. Use a returned group id with the `library_id`/`library_type:"group"` parameters of other tools to operate on that group library. Requires a cloud API key.

### `zotero_export` (~259 tokens)

Export Zotero items

Export items in a bibliographic format and return the raw text. Choose `format` (bibtex, biblatex, better-biblatex, ris, csljson, csv, mods, tei, coins, rdf_*, refer, wikipedia, bookmarks). `biblatex` is Zotero's STOCK translator via the cloud Web API; BBT-specific options (citation-key generation, sentence-case, biblatexExtendedNameFormat, unicode→LaTeX) are NOT available there. `better-biblatex` uses the local desktop Better BibTeX plugin (your configured BBT export options apply) and is only available when desktop Zotero + BBT are running; it degrades to built-in `biblatex` otherwise. Narrow with `item_keys`, `collection_key`, `q`, or `item_type`. A `limit` (default 50) is always applied. For styled human bibliographies use the bibliography tools.

Input parameters:

- `collection_key` (string)
- `format` (string, required)
- `item_keys` (array)
- `item_type` (string)
- `library_id` (integer)
- `library_type` (string)
- `limit` (integer)
- `q` (string)

### `zotero_fulltext` (~216 tokens)

Attachment full-text

Read, set, or track an attachment's extracted full text. `action`: "get" returns the indexed text content plus indexing stats for an attachment item (only attachment items have full text; returns found:false if none); "set" stores extracted text for an attachment (provide `content` and the indexing counts); "since" returns the map of attachment keys whose full text changed after a given library `version` (useful for incremental indexing). Only attachment items support full text. "set" writes via the cloud Web API.

Input parameters:

- `action` (string, required)
- `content` (string): Extracted text (set).
- `indexed_chars` (integer)
- `indexed_pages` (integer)
- `item_key` (string): Attachment item key (get/set).
- `library_id` (integer)
- `library_type` (string)
- `since` (integer): Library version for "since" (default 0).
- `total_chars` (integer)
- `total_pages` (integer)

### `zotero_get_fulltext` (~293 tokens)

Get attachment full text / passages (read-only)

Retrieve an item's PDF text for grounding. Pass a parent `item_key` (its best PDF attachment is resolved automatically) or an attachment key. With `query`, returns the top relevant passages with locators (char offsets, nearest section, and a page); with `page_range` (e.g. "3-7"), returns that span; with neither, returns a truncated head. Page numbers are an estimate (pageApprox) unless `precise_pages:true`, which re-extracts the PDF for exact pages when possible (otherwise it degrades to approximate with a notice). Read-only; cloud full text. Use this to cite a claim with a page after finding an item via zotero_search_items / zotero_semantic_search.

Input parameters:

- `item_key` (string, required): Parent item key or attachment key.
- `library_id` (integer)
- `library_type` (string)
- `max_chars` (integer): Best-effort cap on total returned text (default 12000); a single passage is never split, so one passage may slightly exceed it.
- `max_passages` (integer): Max passages (default 5).
- `page_range` (string): Page span like "3-7" (1-based, inclusive).
- `precise_pages` (boolean): Re-extract the PDF for exact page numbers.
- `query` (string): Return top passages relevant to this query.

### `zotero_sync` (~178 tokens)

Incremental sync delta

Return what changed in a library since a given version, for efficient incremental sync. Provide `since` (a library version; 0 = everything). Returns, per object type (items/collections/searches/tags), the map of keys→version that changed after `since`, plus the deletion log (keys removed since `since`). This is the version-based delta the Zotero sync algorithm uses — fetch the changed keys, then pull only those with zotero_get_item/zotero_search_items. Reads via the cloud Web API.

Input parameters:

- `include_deleted` (boolean): Include the deletion log (default true).
- `library_id` (integer)
- `library_type` (string)
- `since` (integer): Library version to diff from (default 0).
- `types` (array): Which object types to check (default all).

### `zotero_attachment` (~246 tokens)

Zotero attachments (files)

Upload, download, or inspect attachment files. `action`: "upload" stores a local file as a Zotero attachment using the full File Storage protocol (provide `file_path`; optional `parent_item` to attach it under an item, `title`, `content_type`) and returns the new attachment key; "download" fetches an attachment's file to a local path (provide `item_key`; optional `save_path`, default under the Zoteus data dir) and returns the path and byte count; "info" returns an attachment item's metadata. File bytes are written to / read from disk — they are never streamed through the conversation. Upload/download use the cloud Web API and your file-storage quota.

Input parameters:

- `action` (string, required)
- `content_type` (string)
- `file_path` (string): Local file to upload.
- `item_key` (string): Attachment item key (download/info).
- `library_id` (integer)
- `library_type` (string)
- `parent_item` (string): Parent item key to attach under (upload).
- `save_path` (string): Where to write the downloaded file.
- `title` (string)

### `zotero_import` (~235 tokens)

Import items by identifier or URL

Resolve bibliographic metadata from an identifier or web page and optionally save it to your library. `action: "by_identifier"` resolves a DOI, ISBN, PMID, arXiv id, or ADS bibcode (set `identifier`); `action: "by_url"` scrapes a web page (set `url`) and may return multiple choices to pick from. Set `save_to_library:true` (and optionally `collection_key`) to persist the resolved items (requires a cloud API key); otherwise the resolved metadata is returned without saving. Requires a reachable Zotero translation-server (configurable via ZOTEUS_TRANSLATION_SERVER_URL); if none is running, this returns setup instructions.

Input parameters:

- `action` (string, required)
- `collection_key` (string): Collection to add saved items to.
- `identifier` (string): DOI / ISBN / PMID / arXiv id / ADS bibcode.
- `library_id` (integer)
- `library_type` (string)
- `save_to_library` (boolean): Persist the resolved items (needs a cloud key).
- `url` (string): Web page URL to scrape.

### `zotero_styles` (~181 tokens)

Resolve CSL citation styles

Resolve a human citation-style name to a valid CSL style id and confirm it is available, or list common style aliases. `action: "resolve"` maps names like "APA 7th", "IEEE", "Vancouver", "Chicago", "MLA", "Nature" to the correct CSL id (e.g. apa, ieee, modern-language-association) and verifies the style can be fetched; pass the returned `styleId` as the `style` argument to zotero_format_bibliography or zotero_bibliography. `action: "list"` returns the built-in common aliases (any id from the CSL styles repository also works). Dependent styles are resolved to their independent parent automatically when formatting.

Input parameters:

- `action` (string, required)
- `name` (string): Style name to resolve (e.g. "APA 7th").

### `zotero_format_bibliography` (~244 tokens)

Format a bibliography (citeproc / any CSL style)

Render a formatted bibliography in any CSL style using citeproc-js — no Zotero library write required. Provide either `items` (an array of CSL-JSON objects, e.g. from zotero_import or external metadata) or `item_keys` (library items, which are exported to CSL-JSON first). Choose `style` (a name like "APA 7th" or a CSL id; default "apa"), `locale` (default "en-US"), and `format` (html/text/rtf; default html). The formatted bibliography text is returned. Use this for arbitrary items or styles; for items already in the library you can also use zotero_bibliography (server-rendered).

Input parameters:

- `format` (string): Output format (default html).
- `item_keys` (array): Library item keys (exported to CSL-JSON).
- `items` (array): CSL-JSON items to format.
- `library_id` (integer)
- `library_type` (string)
- `locale` (string): Locale (default "en-US").
- `style` (string): Style name or CSL id (default "apa").

### `zotero_bibliography` (~179 tokens)

Server-rendered bibliography (library items)

Produce a formatted bibliography for items already in a Zotero library, rendered server-side by Zotero in a CSL style. Provide `item_keys` and optionally `style` (name or CSL id; Zotero default is chicago-note-bibliography), `locale`, and `linkwrap`. Returns XHTML. Note: this endpoint is item-only and capped at 150 items. For arbitrary CSL-JSON or items not in the library, use zotero_format_bibliography instead.

Input parameters:

- `item_keys` (array, required): Library item keys (max 150).
- `library_id` (integer)
- `library_type` (string)
- `linkwrap` (boolean): Wrap URLs/DOIs in links.
- `locale` (string): Locale (e.g. en-US).
- `style` (string): Style name or CSL id.

### `zotero_index` (~162 tokens)

Build the semantic search index

Build, refresh, or report the status of the local hybrid-search index used by zotero_semantic_search. `action: "build"` (or "refresh") fetches the library's top-level items and indexes their text (title, abstract, creators, tags) for BM25 keyword search and — if an embedding provider is configured — vector search; the index is persisted under the Zoteus data dir. `action: "status"` reports the index size and which embedder is active (it falls back to keyword-only when no local model or embedding API is available). Run a build before semantic searching, and refresh after large library changes.

Input parameters:

- `action` (string, required)
- `library_id` (integer)
- `library_type` (string)

### `zotero_semantic_search` (~190 tokens)

Semantic / hybrid library search

Search the library by meaning, not just keywords. Combines BM25 keyword scoring with vector similarity (when an embedding provider is configured) via reciprocal-rank fusion, and returns the best-matching items with a snippet and score. `mode`: "auto" (hybrid, default), "keyword" (BM25 only), or "semantic" (vector only). Requires the index to be built first with zotero_index (action:"build"); if it is empty, this returns guidance to build it. For exact field/tag/itemType filtering use zotero_search_items instead; use this for conceptual/"papers about X" queries. To read the actual passages of a found item (with page locators) use zotero_get_fulltext.

Input parameters:

- `limit` (integer): Max results (default 10).
- `mode` (string)
- `q` (string, required): Natural-language query.

### `zotero_scholar` (~212 tokens)

Scholarly context (references, citations, related)

Explore the scholarly graph around a paper via OpenAlex (open; Crossref fallback) and see what is — or is not yet — in your library. Provide a `doi` and an `action`: "lookup" (metadata + citation count), "references" (works this paper cites), "citations" (works that cite this paper, most-cited first), or "related" (similar works). With `include_in_library` (default true), each result is flagged `inLibrary` by matching DOIs against your library, so you can spot gaps ("cited works I haven't saved"). `limit` caps results (default 20). Read-only; calls external scholarly APIs.

Input parameters:

- `action` (string, required)
- `doi` (string, required): The DOI of the paper (with or without the https://doi.org/ prefix).
- `include_in_library` (boolean): Flag results already in your library (default true).
- `limit` (integer): Max results (default 20).

### `search_tools` (~140 tokens)

Discover Zotero tools

Discover the available Zotero tools by keyword — useful for progressive disclosure when you do not want to load every tool definition up front (the code-execution-with-MCP pattern). Pass an optional `query` (matched against tool names, titles, and descriptions) and `detail` ("names" or "descriptions", default "descriptions"). Returns the matching `zotero_*` tools so you can pick the right one for a task. With no query, returns the full catalog.

Input parameters:

- `detail` (string): How much to return (default "descriptions").
- `query` (string): Keyword to match against tool names/titles/descriptions.

### `zotero_list_tags` (~116 tokens)

List Zotero tags (read-only)

List tags in a Zotero library with their usage count and whether each was auto-applied by Zotero. Optional `q` substring filter and `limit`. Read-only — available even when the connector runs in read-only mode (unlike zotero_manage_tags, which also writes). For taxonomy hygiene use zotero_tag_audit.

Input parameters:

- `library_id` (integer)
- `library_type` (string)
- `limit` (integer): Max tags (default 100).
- `q` (string): Substring filter.

### `zotero_list_collections` (~103 tokens)

List Zotero collections (read-only)

List collections in a Zotero library (key, name, parent collection key, item count). Read-only — available even in read-only mode (unlike zotero_manage_collections, which also writes). Use the keys to scope zotero_search_items (collectionKey) or zotero_tag_audit (scope.collection_keys).

Input parameters:

- `library_id` (integer)
- `library_type` (string)
- `top` (boolean): Only top-level collections.

### `zotero_tag_audit` (~218 tokens)

Audit tags against a controlled vocabulary

Audit a library against a controlled tag vocabulary with priority tiers. Provide the vocabulary inline as `vocabulary` (or a JSON file via `vocabulary_path`): { tags:[{name,tier?}], tiers?:[{name,required?}] }. Reports (1) off-taxonomy tags (library tags not in the vocabulary; Zotero auto-applied tags are bucketed separately unless include_auto), (2) items missing a tag from each required tier, and (3) optional per-collection coverage when `scope.collection_keys` is given. Read-only. Tag/auto-tag enumeration uses the cloud Web API.

Input parameters:

- `include_auto` (boolean): Treat Zotero auto-applied tags as off-taxonomy too.
- `library_id` (integer)
- `library_type` (string)
- `limit` (integer): Max items listed per report (default 50).
- `scope` (object)
- `vocabulary` (object)
- `vocabulary_path` (string): Path to a JSON file with the vocabulary.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus#diagnostics

## Score history

- 2026-08-03: 74
- 2026-08-02: 74
- 2026-08-01: 23
- 2026-07-31: 23
- 2026-07-30: 6
- 2026-07-28: 48
- 2026-07-27: 48

## Links

- npm package: https://www.npmjs.com/package/@oscardvs/zoteus
- Socket report: https://socket.dev/npm/package/@oscardvs/zoteus
- Repository: https://github.com/oscardvs/zoteus
- Changelog RSS feed: https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus/changelog.json
- HTML version of this page: https://verifymcp.io/servers/oscardvs-zoteus/oscardvs-zoteus