io.github.piiinpiiins/zotero-mcp-local

MCPcommunity
v0.1.4io.github.piiinpiiinsUnknownUpdated 3mo agoGitHub

Search, read PDFs, and find related papers in your local Zotero library. Read-only, 100% local.

這是一個提供給支援 Model Context Protocol (MCP) 客戶端使用的伺服器軟體，讓 AI 能夠具備讀取與搜尋您本機 Zotero 書目資料庫的技能。目前主流多搭配 Claude Desktop App 使用。 不用下載任何資料夾，跟著下面四步做就好。就像幫 Claude 裝一個新玩具，裝好它就會讀你的 Zotero 書庫了。 是一個會自動幫你準備好程式的工具。打開「終端機」（Mac）或「PowerShell」（Windows），把下面這行貼進去，按 Enter，等它跑完： 1. 打開 Claude Desktop，點左上角選單的 Settings（設定）。 2. 點 Developer（開發者），再點 Edit Config（編輯設定） 按鈕。 3. 電腦會自動幫你打開一個叫 的檔案。 把下面這段整個複製，貼到剛剛打開的檔案裡，然後存檔（按 或 ）：…

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
8GitHub stars
1Forks
3mo agoLast update
Package
Authorio.github.piiinpiiins
LicenseUnknown
Version0.1.4
Sourcemcp-registry
GitHubpiiinpiiins/Zotero-MCP-lite
SBOMCycloneDX 1.6 ↓
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface—
Security scan✓ Cleanv0.1.4 · 3mo agoHow well does this scan work?
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

Source not readable3mo ago

The published package tarball could not be read at scan time (no sdist), so no tool declarations could be extracted from it. Nothing here is a statement about what this exposes.

About

這是一個提供給支援 Model Context Protocol (MCP) 客戶端使用的伺服器軟體，讓 AI 能夠具備讀取與搜尋您本機 Zotero 書目資料庫的技能。目前主流多搭配 Claude Desktop App 使用。 不用下載任何資料夾，跟著下面四步做就好。就像幫 Claude 裝一個新玩具，裝好它就會讀你的 Zotero 書庫了。 是一個會自動幫你準備好程式的工具。打開「終端機」（Mac）或「PowerShell」（Windows），把下面這行貼進去，按 Enter，等它跑完： 1. 打開 Claude Desktop，點左上角選單的 Settings（設定）。 2. 點 Developer（開發者），再點 Edit Config（編輯設定） 按鈕。 3. 電腦會自動幫你打開一個叫 的檔案。 把下面這段整個複製，貼到剛剛打開的檔案裡，然後存檔（按 或 ）： 小提醒：如果檔案裡本來就有別的字，不要刪掉它們，只要把 這部分加進 裡面就好。不確定怎麼合併的話，把整個檔案內容貼給 Claude，請它幫你改好再貼回來。 完全關掉 Claude…

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

Forge's dependency resolver reads npm metadata only, so this PyPI package has no resolved tree. That is a gap in coverage, not a clean bill of health.