Zotero Plugins Atlas
Plugins / Reading & PDFs

Iris

by zbhou2002 · github.com/zbhou2002/iris-zotero

Your AI, inside Zotero. Ask about passages, translate in place, dictate locally, and highlight a paper’s contributions and evidence. Connect a supported Codex account or your own API. Mac + Windows.

Reading & PDFsAI & summariesTranslation
View source
Downloads a .xpi file (1.7 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
1
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
28
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
because it installs and runs npm or PyPI packages without a fixed version
Applies to v3.4.18, released 16 Sep 2026Code checked · tested installed in Zotero 9.0.6 on 27 Sep 2026
Doesn't work with the current Zotero (10)Works with Zotero 7, 8, 9.
Another plugin uses the same IDOne other plugin shares this add-on ID. Zotero can only install one of them.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify20 addresses in 6 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (7)
Codex CLI (OpenAI)Gemini CLI (Google)api.individual.githubcopilot.comautopush-cloudcode-pa.sandbox.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chatgpt.comcloudcode-pa.googleapis.comdaily-cloudcode-pa.sandbox.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Translation (1)
pdf2zh-next (SiliconFlow, or the engine it's set up with)
Scholarly services (6)
api.crossref.orgapi.openalex.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.semanticscholar.orgdoi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.eutils.ncbi.nlm.nih.govwww.ncbi.nlm.nih.gov
Apps you connect (3)
accounts.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.oauth2.googleapis.comwww.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Code hosting (1)
github.com
On your computer (2)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.localhostnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
api.individual.githubcopilot.comcontent/scripts/aidea.js · line 26137
DEFAULT_COPILOT_API_BASE = "https://api.individual.githubcopilot.com";
chatgpt.comcontent/scripts/aidea.js · line 21929
return "$env:CODEX_NON_INTERACTIVE=1; $sys=$env:SystemRoot; $env:Path=(Join-Path $sys 'System32')+';'+$sys+';'+(Join-Path $sys 'System32\\WindowsPowerShell\\v1.0')+';'+$env:Path; irm https://cha
cloudcode-pa.googleapis.comcontent/scripts/aidea.js · line 24209
"https://cloudcode-pa.googleapis.com",
Powerful capabilitiesInstalls and runs npm or PyPI packages without a fixed version, and 12 moreHighHigh concern: a serious problem. One high finding makes the grade C.
Installs and runs npm or PyPI packages without a fixed versionhighHigh concern: a serious problem.Signs in using another app's identitymediumMedium concern: worth reading before you install.Changes settings in other programs or on your computermediumMedium concern: worth reading before you install.Keeps its own tables in Zotero's databasemediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Reuses a sign-in you saved in another programmediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Downloads and runs a program it tells you aboutlowLow concern.Works with files on your computerlowLow concern.Runs its own server for programs on this computerlowLow concern.
Where we found it
Installs and runs npm or PyPI packages without a fixed versioncontent/scripts/aidea.js · line 24716

pdf2zh_next: installs the newest version each time

let updateResult = await runExecutableCommand(npmState.npmPath, [
Signs in using another app's identitycontent/scripts/aidea.js · line 26181

Signs in as GitHub Copilot for VS Code

COPILOT_GITHUB_CLIENT_ID = "Iv1.b507a08c87ecfe98";
Changes settings in other programs or on your computercontent/scripts/aidea.js · line 22202

Changes Zotero's proxy settings, at startup, without asking; changes the settings of conda and npm; adds a folder to your PATH

prefSvc.setIntPref("network.proxy.type", 1);
Keeps its own tables in Zotero's databasecontent/scripts/aidea.js · line 18758
await Zotero.DB.queryAsync(
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/aidea.js · line 511

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/aidea.js · line 467

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Launches programs on your computercontent/scripts/aidea.js · line 21165

Programs it names include cmd, codesign, ditto, pkill, powershell and 3 more

const execFn = Zotero?.Utilities?.Internal?.exec;
Reuses a sign-in you saved in another programcontent/scripts/aidea.js · line 23127

Reuses the sign-in you saved in Codex CLI, Gemini CLI

const authPath = joinPath2(home, ".codex", "auth.json");
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9 · not 10, 11 betaDoesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✗ doesn't workZotero 11 beta ✗ doesn't work
What you'll needAn API keyDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 16 Sep 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in English and ChineseInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API keyNeeds a key you get from the service (OpenAI Codex account, Google Gemini account and your own API provider). What needs it: the AI model: a supported Codex account sign-in (the default) or your own API endpoint and key.
  • Zotero 7, 8, 9Not working with Zotero 10

Where your data goes

We found: only contacts services we could identify. 20 addresses in 6 groups.

AI services (7)
Codex CLI (OpenAI)Gemini CLI (Google)api.individual.githubcopilot.comautopush-cloudcode-pa.sandbox.googleapis.comnamed in its codechatgpt.comcloudcode-pa.googleapis.comdaily-cloudcode-pa.sandbox.googleapis.comnamed in its code
Translation (1)
pdf2zh-next (SiliconFlow, or the engine it's set up with)
Scholarly services (6)
api.crossref.orgapi.openalex.orgnamed in its codeapi.semanticscholar.orgdoi.orgnamed in its codeeutils.ncbi.nlm.nih.govwww.ncbi.nlm.nih.gov
Apps you connect (3)
accounts.google.comnamed in its codeoauth2.googleapis.comwww.googleapis.comnamed in its code
Code hosting (1)
github.com
On your computer (2)
127.0.0.1named in its codelocalhostnamed in its code
Evidence · file and line
api.individual.githubcopilot.comcontent/scripts/aidea.js · line 26137
DEFAULT_COPILOT_API_BASE = "https://api.individual.githubcopilot.com";
chatgpt.comcontent/scripts/aidea.js · line 21929
return "$env:CODEX_NON_INTERACTIVE=1; $sys=$env:SystemRoot; $env:Path=(Join-Path $sys 'System32')+';'+$sys+';'+(Join-Path $sys 'System32\\WindowsPowerShell\\v1.0')+';'+$env:Path; irm https://cha
cloudcode-pa.googleapis.comcontent/scripts/aidea.js · line 24209
"https://cloudcode-pa.googleapis.com",

Forks and alternatives

1 other plugin uses the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 2 plugins carry the same one.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • They do different things. The one you install may have nothing to do with the one it replaces.
Iris · this pluginzbhou2002/iris-zoteroCNot recommended2816 Sep 2026
AIdeaVisterainer/aidea-zoteroCNot recommended19,63318 Sep 2026
See all 2 and how they differ →

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • Bionic for ZoteroReading & PDFsA+Recommended, tested in Zotero
  • ZotLitReading & PDFs · Citing & writingA+Recommended, tested in Zotero
  • Zotero Focused ModeReading & PDFsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Iris
CNot recommended
We don't recommend itIt installs and runs npm or PyPI packages without a fixed version.
Better-graded plugins for the same jobA+NoteroA+Bionic for ZoteroA+ZotLit
Read what we found