find_and_attach_pdfs

THE RISK

Medium Risk

Why find_and_attach_pdfs needs a policy

The tool modifies existing Zotero library items by attaching PDF files retrieved from Unpaywall. This is a reversible write operation (attachments can be deleted), not destructive. It does not execute code or move money. Severity is medium because it could attach unintended files to many library items at scale.

From the tool's definition 'check Unpaywall for open access PDFs and attach them' — the tool fetches external PDFs and attaches them to existing Zotero items

Documented attack patterns abuse exactly the kind of access find_and_attach_pdfs gives an agent:

POLICY

How to control find_and_attach_pdfs

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Zotero, and nothing reaches the server without passing your rules. This is the rule we recommend for find_and_attach_pdfs:

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "find_and_attach_pdfs": {
      "limits": [
        {
          "counter": "find_and_attach_pdfs_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

find_and_attach_pdfs stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

Create a free account and register Mcp Zotero — nothing to install.
Add this policy — paste it, or build it visually.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

LIMIT THIS TOOL →

Free to start. No card required.

EXPLORE

Related tools and policies

More Mcp Zotero tools

Destructive delete_collection Delete a collection (folder) from your Zotero library. Items inside the collection are NOT Destructive delete_items Delete one or more items from your Zotero library permanently (moves to trash). Accepts up Write add_items_by_doi Add items to your Zotero library by resolving DOIs. Works with ANY item type that has a DO Write add_linked_url_attachment Attach a linked URL to an existing Zotero item, or create a standalone linked-URL attachme Write create_collection Create a new collection (folder) in your Zotero library. Optionally nest it under a parent Write import_pdf_to_zotero Download a PDF from a URL and upload it to Zotero storage as an imported_url attachment. U Write inject_citations Replace <zcite> placeholder tags in a .docx file with native Zotero field codes that Zoter Read get_collection_items Get all items in a specific Zotero collection. Returns item keys, titles, authors, and dat

All 13 Mcp Zotero tools →

Write tools on other servers

M-Team MCP Server download_torrent YouTube MCP Server generate_video_title Android Forensics ADB MCP Server combine_reports 0xarchive web3_signup

Go deeper

The MCP Attack Database → Documented attack patterns against MCP deployments — and the policies that stop them.
Argument validation → Checking tool call arguments against schema and policy before they run.
Scoped token → Per-person credentials that grant a defined subset of servers and tools.
Rate Limiting MCP Tool Calls: A Practical Guide →
MCP Security: Why Prompt Guardrails Aren't Enough →

FAQ

Questions about find_and_attach_pdfs

What does the find_and_attach_pdfs tool do? +

For each Zotero item, check Unpaywall for open access PDFs and attach them. Items must have a DOI. Uses the same source as Zotero Desktop. It is categorised as a Write tool in the Mcp Zotero MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on find_and_attach_pdfs? +

Register the Mcp Zotero MCP server in PolicyLayer and add a rule for find_and_attach_pdfs: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Mcp Zotero. Nothing to install.

What risk level is find_and_attach_pdfs? +

find_and_attach_pdfs is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit find_and_attach_pdfs? +

Yes. Add a rate_limit block to the find_and_attach_pdfs rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block find_and_attach_pdfs completely? +

Set action: deny in the PolicyLayer policy for find_and_attach_pdfs. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides find_and_attach_pdfs? +

find_and_attach_pdfs is provided by the Mcp Zotero MCP server (xevos117/mcp-zotero). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Mcp Zotero tool call.

Start from Mcp Zotero, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →