Zotero Local MCP Bridge Server

Use a Zotero plugin-hosted MCP endpoint to let local agents manage a local Zotero library safely.

Documentation

Zotero Local MCP Bridge

Use a Zotero plugin-hosted MCP endpoint to let local agents manage a local Zotero library safely.

License Version Zotero MCP Local First PRs welcome Codex ready OpenCode ready Claude Code ready

AGPL-3.0-or-later · Plugin version 0.1.56 · Zotero 9.x · Plugin-hosted MCP · Local loopback access

简体中文 · English

What It Does · What It Does Not Do · Scope · How It Works · Quick Start · Examples · Support Author · License


✨ What It Does

Zotero Local MCP Bridge lets MCP-capable agents manage a local Zotero library through Zotero itself. It is not a database script that bypasses Zotero. It is a local MCP entrypoint running inside the Zotero plugin.

AreaCapability
📚 Items and collectionsRead, search, create, and edit items; manage fields, creators, tags, notes, collections, and collection membership
📎 AttachmentsAdd, move, rename, and inspect attachments; call Zotero's built-in attachment rename logic
📝 Annotations and citationsRead, create, and update supported PDF annotations; format citations and bibliographies through Zotero
🔁 Import and exportImport and export BibTeX, RIS, and CSL JSON
🔎 SearchUse basic search, advanced search, and saved search read/update workflows
🛡️ Safety workflowEnforce dry-run for all writes; support approval, audit, file-level backup, and undo
🧩 DuplicatesFind duplicates and run controlled duplicate merge flows

[!NOTE] Writes do not execute immediately. The agent first receives a dry-run plan, warnings, affected targets, and confirmation data. In approval modes, execution must wait for user approval.


🚫 What It Does Not Do

Not supportedReason
Managing online Zotero librariesThis project does not write through the Zotero Web API or manage remote Zotero accounts
Using ZOTERO_API_KEYThis project does not request, read, or store a Zotero API key
Writing directly to zotero.sqliteChanges should go through Zotero internal APIs
Exposing arbitrary JavaScript evalOrdinary management must come from the plugin command table
Managing group librariesThe current public scope covers local user libraries only
Permanent deletion or empty trashCurrent delete-like flows use Zotero trash or controlled merge, not unrecoverable erase
Directly deleting existing attachment filesAttachment file operations must respect backup/undo and safety boundaries

📍 Scope

This plugin is designed for Zotero Desktop and a local MCP client on the same machine. The MCP endpoint is registered on Zotero's local connector server and uses local loopback access only.

ItemCurrent setting
Runtime locationInside the Zotero plugin
Endpointhttp://127.0.0.1:23119/zotero-local-mcp-bridge/mcp
Library scopeLocal user library
Write pathZotero internal APIs
Network modelLocal loopback, no cloud writes
Audit and backupMust stay outside the Zotero profile, Zotero data directory, linked attachment root, and attachment directories

Run mode is configured in Settings -> Zotero Local MCP Bridge:

ModeBehavior
readonlyBlocks all writes
askforapproveThe agent asks the user for approval after dry-run
yoloOrdinary writes may auto-execute when the plan allows it; high-risk or future unrecoverable operations still require explicit confirmation

⚙️ How It Works

MCP-capable agent
  -> MCP tool call
  -> Zotero local connector server
  -> Zotero Local MCP Bridge plugin endpoint
  -> plugin command table
  -> Zotero internal API

The MCP endpoint is hosted inside the Zotero plugin:

http://127.0.0.1:23119/zotero-local-mcp-bridge/mcp

There is no separate Node, Python, or sidecar MCP process to start. Starting Zotero starts the plugin endpoint. Closing Zotero stops it. The release build exposes MCP tools, not the old private command endpoint.


🚀 Quick Start

1. Download Release Files

Download from GitHub Releases:

FilePurpose
zotero-local-mcp-bridge.xpiZotero plugin
English skillFor English-speaking agents
Chinese skillFor Chinese-speaking agents

2. Install The Zotero Plugin

Open the Zotero plugin manager:

Tools -> Plugins

Drag zotero-local-mcp-bridge.xpi into the plugin manager window, confirm installation when prompted, and restart Zotero.

3. Choose Run Mode

Open:

Settings -> Zotero Local MCP Bridge

For first use, start with readonly or askforapprove. Use yolo only after you understand dry-run, approval, audit, and backup behavior.

4. Connect The MCP Client

Configure your MCP-capable agent to connect through Streamable HTTP / HTTP JSON-RPC:

http://127.0.0.1:23119/zotero-local-mcp-bridge/mcp

5. Install The Matching Skill

LanguageSkill
Englishskills/zotero-local-mcp-bridge/SKILL.md
Chineseskills/zotero-local-mcp-bridge-zh-cn/SKILL.md

Tell the agent to use Zotero through Zotero Local MCP Bridge. When approval is required, the agent should briefly describe the pending operation and wait for user approval.


🧪 Examples

Ask the agent toExpected behavior
List my Zotero collection treeRead-only query, no write confirmation
Create a "Reading Queue" subcollection under "Current Project"Dry-run first, then ask for approval
Add this PDF attachment to this itemResolve the item and file path, then dry-run the attachment operation
Export selected items as BibTeXRead-only export, no write confirmation
Format a bibliography with a chosen styleUse Zotero's citation formatter

In approval mode, a single write operation should interact through the agent like this:

I am about to create a subcollection named "Reading Queue" under "Current Project". Approve execution?

Multiple pending operations use a numbered table, so the user can approve all operations or approve only selected numbers:

The following operations need approval:

| No. | Operation |
|---:|---|
| 1 | Move subcollection "Temporary" under "Old Project" to Zotero trash |
| 2 | Merge duplicate items "Smith 2024" and "Smith 2024 copy" |
| 3 | Add "Zotero MCP design notes" to "Current Project / Reading Queue" |

The user can reply "approve all", or reply "approve 1 and 3, reject 2".


❤️ Support Author

Ko-fi Afdian

📄 License

Zotero Local MCP Bridge is licensed under AGPL-3.0-or-later. See LICENSE.