zotero_get_annotations

What zotero_get_annotations does on Zotero MCP

AI agents call zotero_get_annotations to retrieve information from Zotero MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why zotero_get_annotations is rated Low

Annotations are metadata/notes associated with research items. Getting/retrieving annotations has no capacity to modify, delete, or execute operations—it is purely a read operation querying the Zotero library. This aligns with the server's stated purpose of allowing users to 'search your library' and 'access content.' Low severity because retrieval of user's own library data poses minimal security risk.

From the tool's definition Tool name 'zotero_get_annotations' indicates retrieval of annotations from Zotero items; corroborated by context showing sibling tools including 'fetch' and 'search' which are clearly read operations.

The rule that runs zotero_get_annotations safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Zotero MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For zotero_get_annotations, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "zotero_get_annotations": {}
  }
}

Questions about zotero_get_annotations