Back to Home
nicsuzor icon

zotmcp

Verified Safe

by nicsuzor

Overview

MCP server for semantic search, literature review, and citation retrieval from a ChromaDB-indexed Zotero academic library.

Installation

Run Command
docker run --rm -v /home/$USER/.config/gcloud:/root/.config/gcloud:ro -i us-central1-docker.pkg.dev/prosocial-443205/reg/zotmcp:latest

Environment Variables

  • ZOTERO_API_KEY
  • ZOTERO_LIBRARY_ID
  • OPENALEX_EMAIL
  • MCP_TRANSPORT
  • MCP_HTTP_HOST
  • MCP_HTTP_PORT

Security Notes

The OAuth client ID and secret for installed apps are hardcoded in `src/zotmcp/download.py`. While typical for public clients, this means they are not truly secret. Zotero API key is expected from environment variables and managed by Buttermilk's credential system (likely GCP Secret Manager), which is good practice. The HTTP server binds to `0.0.0.0` by default, which is standard for containerized applications but requires proper firewalling in production environments. No 'eval' or obvious obfuscation found.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens2000
Stars0
Forks0
Last Update2026-01-07

Tags

AI & MLVector DatabaseZoteroLiterature ReviewSemantic SearchAcademic ResearchChromaDBOpenAlex