
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@oscardvs/zoteus
Advanced tools
The everything Zotero MCP server — complete Zotero Web API v3 + desktop local API for Claude and any MCP client.
The everything Zotero MCP server. Give Claude, Cursor, and any MCP client complete, safe access to your Zotero library — search papers, add by DOI, format bibliographies in ~2,800 styles, run semantic search over your own PDFs, and ground every answer in a source you actually own. Local-first. Private. One command.
npx -y @oscardvs/zoteus
| Client | Command |
|---|---|
| Claude Code | claude mcp add --transport stdio zoteus -- npx -y @oscardvs/zoteus |
| Cursor / VS Code / Claude Desktop / Codex / Zed… | npx add-mcp @oscardvs/zoteus |
| Claude Desktop (one-click) | download zoteus.mcpb from the latest release → double-click |
| claude.ai (web) | Add custom connector → your hosted URL (OAuth) |
Add your cloud key for writes/sync/groups (optional — reads work key-free against the desktop app):
claude mcp add --transport stdio zoteus -e ZOTERO_API_KEY=xxxxx -- npx -y @oscardvs/zoteus
Get a key at zotero.org/settings/keys. For key-free local reads, enable Settings → Advanced → "Allow other applications on this computer to communicate with Zotero" in the desktop app.
There are several Zotero MCP servers now. Zoteus is the one that does everything — and adds the parts everyone else skips. The difference that matters: Zoteus treats your library as the source of truth, not a search index. When you ask Claude to "draft a methods paragraph citing the five most relevant papers in my collection," it runs that against your verified, already-curated references — no invented citations, no Python stack, nothing leaves your machine.
| Zoteus | Other Zotero MCP servers | Web AI (Elicit/SciSpace) | |
|---|---|---|---|
| Operates on your own library | ✅ | ✅ (varies) | ❌ (web-wide) |
| Complete Web API v3 + desktop local API | ✅ | partial | n/a |
| Safe transactional writes (reversible, gated) | ✅ | rare | ❌ |
| CSL bibliographies (~2,800 styles) | ✅ | rare | ❌ |
| Local hybrid semantic search over PDFs | ✅ | some (cloud) | varies |
No Python — TypeScript, one npx | ✅ | varies | n/a |
| MCP Resources + Prompts + code-execution | ✅ | ❌ | n/a |
| Local-first / private · Open-source (MIT) | ✅ | varies | ❌ |
docs/resolver.md).zotero_get_fulltext returns the relevant passage with character offsets, nearest heading, and a page locator.zotero_*-namespaced, structured outputs, and a generated tool tree for the code-execution-with-MCP pattern.npx command (or the one-click .mcpb).Zoteus auto-detects your running Zotero desktop app and uses its fast, key-free local API for reads (full PDFs, real saved-search results), falling back to the cloud Web API v3 for writes, sync, and group libraries.
| Variable | Default | Purpose |
|---|---|---|
ZOTERO_API_KEY | — | Cloud auth (writes/sync/groups; optional for local-only reads) |
ZOTEUS_LOCAL | auto | auto|on|off — use the Zotero desktop local API |
ZOTEUS_EMBEDDINGS | local | local|openai|gemini|off for semantic search |
ZOTEUS_ALLOW_DELETE | false | Must be true to expose permanent deletion |
Full table in docs/configuration.md. Running a shared/remote instance? See docs/remote-oauth.md (self-host the OAuth remote on loopback or behind your own proxy).
📚 zoteus.com/docs · Configuration · Import & resolver · Architecture · Safe writes · Citations · Semantic search · Scholarly context · Code execution · Deployment
Contributions welcome — see CONTRIBUTING.md. MIT licensed.
Built on the Model Context Protocol, the Zotero Web API, citeproc-js, and the Citation Style Language. Not affiliated with or endorsed by the Corporation for Digital Scholarship / Zotero.
FAQs
MCP server that gives Claude, ChatGPT and other MCP clients access to a Zotero library: search, citations, adding items, safe writes, semantic search, PDF passages and page images.
The npm package @oscardvs/zoteus receives a total of 1,063 weekly downloads. As such, @oscardvs/zoteus popularity was classified as popular.
We found that @oscardvs/zoteus demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.