Comprehensive Zotero library management via dual-API architecture (local read + web write). Works with any AI coding assistant that supports skills or custom instructions.
📚 Part of the agentic AI learning roadmap — a 7-stage curated path for building agentic AI, multilingual (zh-TW · zh-CN · English). This skill is referenced in §13 (research workflow skills).
A skill that gives AI coding assistants full CRUD access to your Zotero library. Search, add, classify, annotate, and organize references programmatically — all from your terminal.
See Features below for the full list.
Beyond standard CRUD, this skill does four things an AI agent often wrongly calls impossible:
- Writes, even though the Zotero MCP server is read-only. That MCP server is configured separately from this skill; writes go through the shared client's own Web API key instead, resolved from environment variables, then
~/.claude/.env, thenconfig.json. Callcredentials_status()to check which one is set (booleans and a source label only, never the value) instead of opening those files yourself. - Merge duplicate items, even though the Web API has no merge endpoint:
ZoteroDualClient.merge_duplicates()reproduces the core of a desktop merge (move every child, union collections/tags/relations, add adc:replacesrelation, then trash the duplicate, recoverable withrestore_item()). - Attach a PDF reliably, even over a long Windows path with spaces, which can make pyzotero's
attachment_simplefail silently.ZoteroDualClient.attach_pdf()copies to a short, safe,zot_-prefixed filename first and raises the failed-upload template pyzotero returns (it does not expose a deeper server reason) instead of staying silent. - Guide the search for a missing PDF instead of assuming a manual download: check Downloads and Zotero's storage folder, then, with the user's OK, a browser MCP in their logged-in session.
See the capability table in skills/zotero-skills/SKILL.md for the full list and what each one does not cover.
- Search & Discovery — Full-text search, tag-based filtering, collection browsing, recent items
- Create Items — Add journal articles, books, conference papers, reports, theses, webpages with full metadata
- Update & Organize — Edit metadata, manage tags, move items between collections, batch operations
- Delete & Cleanup — Remove items, notes, collections; duplicate detection
- Dual-API architecture — Reads via fast local API (port 23119), writes via Zotero Web API
- Auto health check & fallback — Detects Zotero desktop status; seamless fallback to web-only mode
- Built-in rate limiting —
safe_api_call()wrapper prevents API quota violations
- Child notes — Attach rich HTML notes to any library item
- Reading notes — Create structured reading notes with sections
- Batch note creation — Add notes to multiple items programmatically
- Create & organize — Build hierarchical collection structures
- Bulk operations — Move/copy items between collections in batch
- Collection browsing — List and navigate collection trees
- Framework-agnostic — Works with Claude Code, Codex CLI, Gemini CLI, Cursor, or any AI assistant
- Python library — Import
zotero_client.pydirectly in any Python project - JSON templates — Pre-built templates for all Zotero item types
- Python 3.10+
- pyzotero:
pip install pyzotero
- API Key — Generate at https://www.zotero.org/settings/keys. Grant the least privilege you need — enable write access only if you will create / update / delete.
- Library ID — Found on the same page under "Your userID for use in API calls"
The shared client resolves credentials in this order: environment variables → ~/.claude/.env → config.json. The simplest, safest way is a single file — create ~/.claude/.env and paste three lines:
ZOTERO_API_KEY=your_key_here
ZOTERO_LIBRARY_ID=your_library_id
ZOTERO_LIBRARY_TYPE=userThat's it — no code, works everywhere, and nothing to commit. (Setting the same three as shell environment variables works too.)
A stale OS-level credential overrides
~/.claude/.env. Diagnose the resolved source withcredentials_status(); never echo the API key, paste it into a chat, or open credential files for an agent. Review any change to credentials or persistent access yourself.
From the repository root (or the resolved marketplace plugin root), this read-only diagnostic prints presence and source labels without credential values:
python -c "from scripts.zotero_client import credentials_status; print(credentials_status())"Legacy alternative: config.json (deprecated)
config.json still works but is deprecated — it emits a DeprecationWarning at runtime. It is gitignored so it is never committed. Prefer ~/.claude/.env; use this only if you cannot set env vars:
cp config.example.json config.json # then fill in your key + library id{ "zotero_api_key": "YOUR_API_KEY", "zotero_library_id": "YOUR_LIBRARY_ID", "zotero_library_type": "user" }Never commit credentials.
Install via the ai-research-skills Claude Code marketplace:
claude plugin marketplace add WenyuChiou/ai-research-skills
claude plugin install zotero-skills@ai-research-skills --scope userMigrating from a previous
cp -r/git cloneinstall? SKILL.md moved from the repo root toskills/zotero-skills/SKILL.mdfor marketplace auto-discovery. The oldcp -r zotero-skills/ ~/.claude/skills/zotero-skills/layout no longer loads (Claude Code scans only one level deep). Remove the old copy (rm -rf ~/.claude/skills/zotero-skills) and run the marketplace install above.
This skill was developed for Claude Code but works with any AI assistant.
| CLI | How to load the skill |
|---|---|
| Claude Code | Place in ~/.claude/skills/ or .claude/skills/ — auto-loaded |
| Codex CLI | Load the inner skills/zotero-skills/SKILL.md through skills discovery or task context; -C / --cd selects the working directory, not a context file |
| Gemini CLI | Include SKILL.md in system prompt or project context |
| Cursor / Windsurf | Add SKILL.md to .cursor/rules or equivalent rules file |
| Any other tool | Paste relevant sections of SKILL.md into your system prompt |
zotero-skills/
├── .claude-plugin/plugin.json # Marketplace manifest
├── config.example.json # Template for API credentials
├── config.json # Your credentials (gitignored — never committed)
├── requirements.txt # pyzotero dependency
├── LICENSE # MIT
├── scripts/
│ ├── zotero_client.py # ZoteroDualClient + helpers
│ └── add_literature.py # Batch import script template
├── skills/zotero-skills/
│ ├── SKILL.md # Agent operating rules
│ └── references/ # api-setup, read/create/update/delete-operations,
│ └── ... # error-handling, endpoint-cheatsheet, api-reference, item-types
├── README.md # English
└── README_zh-TW.md # 繁體中文
Zotero exposes two APIs with different capabilities. This skill routes automatically.
Local API (localhost:23119) |
Web API (api.zotero.org) |
|
|---|---|---|
| Access | Requires Zotero desktop running | Works anywhere |
| Read | ✅ Fast, full-text search | ✅ Standard queries |
| Write | ❌ Not supported (501) |
✅ Full CRUD |
| Rate limit | None | ~100 req / 10 sec (dynamic; honor Backoff/Retry-After headers) |
| Auth | Zotero-Allowed-Request: true header |
Zotero-API-Key: <key> header |
On initialization, ZoteroDualClient calls check_local_api() — a lightweight GET to localhost:23119.
- If Zotero desktop is not running → reads fall back to Web API automatically, no config change needed
- Performance degrades slightly (web latency), but all operations still work
from scripts.zotero_client import ZoteroDualClient
dual = ZoteroDualClient()
# dual.local_available → True if Zotero desktop running, False otherwise
results = dual.search("flood adaptation") # local API if available
dual.create_note("ITEM_KEY", "Section", "Notes...") # always web API- The local API does not support write operations — all creates/updates/deletes go through the Web API
- If you use a Zotero MCP connector with
ZOTERO_LOCAL=true, its write tools will fail — usezotero_client.pyfor writes
From scripts/zotero_client.py:
| Function | Description |
|---|---|
get_client() |
Configured pyzotero.Zotero Web API instance |
get_collection(name) |
Find collection key by display name from config.json |
add_note(zot, item_key, content) |
Attach a child note to a library item |
check_duplicate(zot, title, doi) |
Check if item with given title or DOI exists |
check_local_api(timeout, library_id) |
Test if Zotero desktop local API is reachable |
ZoteroDualClient |
Dual-API wrapper — local reads, web writes, auto-fallback |
safe_api_call(func) |
API call wrapper with automatic rate-limit backoff |
Run from the repository/plugin root, which contains scripts/. A portable
SKILL.md copy alone does not include the shared client.
from scripts.zotero_client import ZoteroDualClient
dual = ZoteroDualClient()
print(f"Local API available: {dual.local_available}")
results = dual.search("flood risk perception")
dual.create_note("I3P2J58S", "Section 2", "<p>Discusses PMT framework.</p>")from pyzotero import zotero
zot = zotero.Zotero("YOUR_LIBRARY_ID", "user", "YOUR_API_KEY")
template = zot.item_template("journalArticle")
template["title"] = "Deep Learning for NLP: A Survey"
template["creators"] = [{"creatorType": "author", "firstName": "Jane", "lastName": "Doe"}]
template["publicationTitle"] = "Nature Machine Intelligence"
template["date"] = "2025"
template["DOI"] = "10.1038/s42256-025-00001-1"
resp = zot.create_items([template])items = zot.items(tag="machine-learning", limit=25)
for item in items:
print(f"{item['data']['title']} — {item['data'].get('date', 'n.d.')}")MIT