academic-mcp

The server interacts with a local Ollama instance for LLM operations, limiting direct exposure to external network threats. It uses `subprocess` calls to manage the Ollama server (start, pull models), which is a common and necessary pattern for integrating local services. Zotero database access is read-only and operates on temporary copies to prevent locking issues and ensure data integrity. Custom JSON parsing logic (`_repair_json`, `_safe_json_loads`) is implemented to robustly handle potentially malformed JSON output from the LLM, reducing the risk of parsing errors. No direct use of `eval()` or hardcoded sensitive credentials beyond the local Ollama host is found. The overall architecture focuses on local processing and read-only access to external data sources, contributing to a relatively high security posture within its operational scope.