get_collection_items

What get_collection_items does on Zotero

AI agents call get_collection_items to retrieve information from Zotero without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_collection_items is rated Low

This tool retrieves or queries items from a Zotero collection without modifying, deleting, or executing any operations. It is a straightforward data retrieval function consistent with the Read category. The severity is low because retrieval of collection items poses minimal risk—the worst case is exposure of information the user already has access to within their own Zotero library.

From the tool's definition Tool name 'get_collection_items' and description 'Get items in a specific collection' indicate a retrieval operation with no side effects. The verb 'Get' is a read operation.

The rule that runs get_collection_items safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Zotero, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_collection_items, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_collection_items": {}
  }
}

Questions about get_collection_items