Downloads a .xpi file (0.5 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
23
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
A+ABBC
because it runs code other programs on this computer send it
Next rung: A, once every finding in the code comes out low.
Applies to v0.6.1, released 21 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify2 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
Zotero (1)
Zotero lookup services
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Powerful capabilitiesRuns code other programs on this computer send it, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Runs code other programs on this computer send itmediumMedium concern: worth reading before you install.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.Other programs on this computer can change your library through itlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
Runs code other programs on this computer send itcontent/scripts/zotmcp.js · line 45602
const fn = new AsyncFunction("Zotero", "env", source);
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 10 · not 9, 11 betaUpdates automatically