Plugins / Reading & PDFs

Reference for Zotero

by Woif-sha · github.com/Woif-sha/reference-for-zotro

Reference management tooling for Zotero

View source
Downloads a .xpi file (0.1 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
2
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
8
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because it signs in using another app's identity, and 2 more findings
Applies to v2.0.3, released 18 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify15 addresses in 3 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (2)
auth.openai.comchatgpt.com
Scholarly services (12)
api.crossref.orgapi.datacite.orgapi.openalex.orgapi.opencitations.netapi.semanticscholar.orgarxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.doi.orgieeexplore.ieee.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openalex.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.pubmed.ncbi.nlm.nih.govscholar.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.ncbi.nlm.nih.govnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Apps you connect (1)
www.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
auth.openai.comchrome/content/scripts/referenceforzotero.js · line 9994
var CODEX_REFRESH_TOKEN_ENDPOINT = "https://auth.openai.com/oauth/token";
chatgpt.comchrome/content/scripts/referenceforzotero.js · line 706
var LEGACY_CODEX_RESPONSES_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
api.crossref.orgchrome/content/scripts/referenceforzotero.js · line 5918
`https://api.crossref.org/v1/works/${encodeURIComponent(doi)}`,
Powerful capabilitiesSigns in using another app's identity, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Signs in using another app's identitymediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Reuses a sign-in you saved in another programmediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Works with files on your computerlowLow concern.
Where we found it
Signs in using another app's identitychrome/content/scripts/referenceforzotero.js · line 9995

Signs in as Codex CLI

var CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
Launches programs on your computerchrome/content/scripts/referenceforzotero.js · line 9550
"resource://gre/modules/Subprocess.sys.mjs"
Reuses a sign-in you saved in another programchrome/content/scripts/referenceforzotero.js · line 10276

Reuses the sign-in you saved in Codex CLI

const codexHome = runtime.environment("CODEX_HOME")?.trim();
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 9, 10 · not 11 betaUpdates automatically
Zotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 18 Sep 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in Chinese onlyInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Reference lists and citing papers via anonymous OpenAlex and Semantic Scholar. Needs a key (OpenAI Codex sign-in, OpenAI-compatible provider and OpenAlex): AI recommendations need Codex sign-in or an OpenAI-compatible API key; an OpenAlex key is optional.

Where your data goes

We found: only contacts services we could identify. 15 addresses in 3 groups.

AI services (2)
auth.openai.comchatgpt.com
Scholarly services (12)
api.crossref.orgapi.datacite.orgapi.openalex.orgapi.opencitations.netapi.semanticscholar.orgarxiv.orgnamed in its codedoi.orgieeexplore.ieee.orgnamed in its codeopenalex.orgnamed in its codepubmed.ncbi.nlm.nih.govscholar.google.comnamed in its codewww.ncbi.nlm.nih.govnamed in its code
Apps you connect (1)
www.google.comnamed in its code
Evidence · file and line
auth.openai.comchrome/content/scripts/referenceforzotero.js · line 9994
var CODEX_REFRESH_TOKEN_ENDPOINT = "https://auth.openai.com/oauth/token";
chatgpt.comchrome/content/scripts/referenceforzotero.js · line 706
var LEGACY_CODEX_RESPONSES_ENDPOINT = "https://chatgpt.com/backend-api/codex/responses";
api.crossref.orgchrome/content/scripts/referenceforzotero.js · line 5918
`https://api.crossref.org/v1/works/${encodeURIComponent(doi)}`,

Forks and alternatives

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • Bionic for ZoteroReading & PDFsA+Recommended, tested in Zotero
  • ZotLitReading & PDFs · Citing & writingA+Recommended, tested in Zotero
  • Zotero Focused ModeReading & PDFsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Reference for Zotero
BUse with care
Before you install: It signs in using another app's identity, and 2 more findings.Read the finding
Compare with similar plugins