Compare two AI tools side by side
Put any two skills or MCP servers next to each other: risk grade, what each can access, how popular it is, and how to install it.
| What | zotero-mcp | zotero-mcp |
|---|---|---|
| Risk grade | CC · Moderate risk signals Based on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee. | BB · Some risk signals Based on public adoption and transparency signals as of Oct 16, 2026. Our opinion, not a code audit or security guarantee. |
| Type | App connector | App connector |
| Est. context load | ~1.1k tokens / turn (~6 tool schemas, 0.53% of 200k context) | ~550 tokens / turn (~3 tool schemas, 0.27% of 200k context) |
| GitHub stars | 1.3k | 5.6k |
| Weekly npm downloads | — | — |
| Local files | Reads local files | No local folder access noted |
| Command execution | No shell command runner noted | No shell command runner noted |
| Network reach | Connects to outside service API | Connects to outside service API |
| Credentials | No API token required | Requires API key or token |
| Package source | GitHub (cookjohn/zotero-mcp) | GitHub (54yyyu/zotero-mcp) |
| Install command | Source repo only | Source repo only |
| Bottom line | This tool gives an AI assistant broad access to your entire research library, so only use it if you trust both the plugin code and the AI service with all your papers and notes. | zotero-mcp (MCP server) requires careful permission scoping — credentials and API exposure: If Zotero credentials or API tokens are embedded in MCP configuration, they may be accessible to the AI model or logged in conversation history. |
Based on public adoption and transparency signals as of Oct 29, 2026. Our opinion, not a code audit or security guarantee.
Go deeper
Want to inspect exact published files, install hooks and network hosts?
Run a pre-install check on any package, MCP config or SKILL.md, or open a full report with PDF export.