Plugins / AI & summaries

Beaver

by jlegewie · github.com/jlegewie/beaver-zotero

AI research assistant that lives in Zotero

View source
Downloads a .xpi file (7.8 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
258
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
142,907
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because its code names developers' servers: api.beaverapp.ai, beaverapp.ai and www.beaverapp.ai, and 3 more findings
Applies to v0.25.2, released 18 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryZotero will update it to version 0.25.3 from jlegewie/beaver-zotero on GitHub (rated: Review the details)
Where your data goesIts code names developers' servers: api.beaverapp.ai, beaverapp.ai and www.beaverapp.ai11 addresses in 7 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Developer's servers (3)
api.beaverapp.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.beaverapp.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.beaverapp.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Cloud functions (1)
xxvxklysvpobontwhwoz.supabase.conamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
AI services (2)
console.anthropic.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Scholarly services (1)
doi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Zotero (2)
Zotero lookup servicesapi.zotero.org
Code hosting (1)
github.com
On your computer (1)
localhost
Where we found it
api.zotero.orgcontent/scripts/beaver.js · line 15623
const resp = await Zotero.HTTP.request("GET", apiUrl, {
github.comcontent/reactBundle.js · line 2
const t=e.match(/^v(\d+)\./);return!!t&&parseInt(t[1],10)<=18})()&&console.warn("⚠️ Node.js 18 and below are deprecated and will no longer be supported in future versions of @supabase/supabase-js. Pl
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 10 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Uses Zotero's password managerlowLow concern.Keeps its own database filelowLow concern.Runs its own server for programs on this computerlowLow concern.Other programs on this computer can change your library through itlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/reactBundle.js · line 2

zotero://plugin

!0)}}catch(e){t.logError(e),$u(e.message,!1)}},newChannel(e){this.doAction(e)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"]=n}};function $u(e,t){const n=new
A zotero:// link can make it run code if you approve a promptcontent/reactBundle.js · line 2

zotero://ztoolkit-debug

ow:n})}catch(e){t.debug(e),n.console.log(e)}}},newChannel(e){this.doAction(e)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"]=e}},Vu=class e{static ve
Launches programs on your computercontent/scripts/beaver.js · line 92006

Programs it names include codesign, ditto, open, spctl, sw_vers and 1 more

"resource://gre/modules/Subprocess.sys.mjs"
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API keyDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 18 Sep 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: Afrikaans, Arabic, Bulgarian, Breton, Catalan, Czech, Danish, German, Greek, English, Spanish, Estonian, Basque, Persian, Finnish, French, Galician, Hebrew, Croatian, Hungarian, Indonesian, Icelandic, Italian, Japanese, Khmer, Korean, Lithuanian, Mongolian, Norwegian Bokmål, Dutch, Norwegian Nynorsk, Polish, Portuguese, Romanian, Russian, Slovak, Slovenian, Serbian, Swedish, Tamil, Thai, Turkish, Ukrainian, Vietnamese and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API keyNeeds a key you get from the service (Beaver, Anthropic, OpenAI, Google AI Studio and OpenRouter). What needs it: Either your own API key (Google, OpenAI, Anthropic) or a paid Beaver account sign-in; the AI agent cannot be used without one of these.

Where your data goes

We found: its code names developers' servers: api.beaverapp.ai, beaverapp.ai and www.beaverapp.ai. 11 addresses in 7 groups.

Developer's servers (3)
api.beaverapp.ainamed in its codebeaverapp.ainamed in its codewww.beaverapp.ainamed in its code
Cloud functions (1)
xxvxklysvpobontwhwoz.supabase.conamed in its code
AI services (2)
console.anthropic.comnamed in its codeopenrouter.ainamed in its code
Scholarly services (1)
doi.orgnamed in its code
Zotero (2)
Zotero lookup servicesapi.zotero.org
Code hosting (1)
github.com
On your computer (1)
localhost
Evidence · file and line
api.zotero.orgcontent/scripts/beaver.js · line 15623
const resp = await Zotero.HTTP.request("GET", apiUrl, {
github.comcontent/reactBundle.js · line 2
const t=e.match(/^v(\d+)\./);return!!t&&parseInt(t[1],10)<=18})()&&console.warn("⚠️ Node.js 18 and below are deprecated and will no longer be supported in future versions of @supabase/supabase-js. Pl

Forks and alternatives

No forks listed.

Plugins for the same job
  • Google Scholar Citation CountCiting & writing · Import & metadataA+Recommended, tested in Zotero
  • DOI FixImport & metadataA+Recommended, tested in Zotero
  • Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
  • MkteroReading & PDFs · Citing & writing · AI & summariesA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Beaver
BUse with care
Before you install: Its code names developers' servers: api.beaverapp.ai, beaverapp.ai and www.beaverapp.ai, and 3 more findings.Read the finding
Compare with similar plugins