Plugins / Organising & tags

Zotadata

by ydeng11 · github.com/ydeng11/zotero-zotadata

Make the management of metadata easier

View source
Downloads a .xpi file (0.09 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
91
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
2,121
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
MIT
B
Atlas gradeUse with care
because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding
Applies to v1.5.5, released 21 Aug 2026Code checked · tested installed in Zotero 9.0.6 on 27 Sep 2026
Doesn't work with the current Zotero (10)Works with Zotero 8, 9.
Another plugin uses the same ID2 other plugins share this add-on ID. Zotero can only install one of them.
Contacts a shadow libraryUsing a site such as Sci-Hub carries legal risk in some countries.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesOnly contacts services we could identify15 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
Scholarly services (13)
api.core.ac.ukapi.crossref.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openalex.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.semanticscholar.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.unpaywall.orgarxiv.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.books.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.dblp.orgdoi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.export.arxiv.orgopenlibrary.orgscholar.google.comwww.sci-hub.pub
Apps you connect (2)
archive.orgwww.googleapis.com
Where we found it
api.core.ac.ukcontent/scripts/zotadata.js · line 5811
`https://api.core.ac.uk/v3/search/works?q=${encodeURIComponent(`doi:"${doi}"`)}&limit=5`,
api.unpaywall.orgcontent/scripts/zotadata.js · line 6044
const url = `https://api.unpaywall.org/v2/${encodeURIComponent(doi)}?email=${encodeURIComponent(email)}`;
dblp.orgcontent/scripts/zotadata.js · line 9947
`https://dblp.org/search/publ/api?q=${cleanTitle}&format=json&h=10`,
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 4 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Sends lookups unencrypted (http://) to export.arxiv.orglowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotadata.js · line 128

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotadata.js · line 84

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 8, 9 · not 10, 11 betaDoesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Zotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✗ doesn't workZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 21 Aug 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Metadata lookup via Crossref, OpenAlex, Semantic Scholar etc. and other PDF sources. Needs a key (CORE): CORE API key (optional, for the CORE PDF source); Unpaywall uses an email.
  • Zotero 8, 9Not working with Zotero 10

Where your data goes

We found: only contacts services we could identify. 15 addresses in 2 groups.

Scholarly services (13)
api.core.ac.ukapi.crossref.orgnamed in its codeapi.openalex.orgnamed in its codeapi.semanticscholar.orgnamed in its codeapi.unpaywall.orgarxiv.orgnamed in its codebooks.google.comnamed in its codedblp.orgdoi.orgnamed in its codeexport.arxiv.orgopenlibrary.orgscholar.google.comwww.sci-hub.pub
Apps you connect (2)
archive.orgwww.googleapis.com
Evidence · file and line
api.core.ac.ukcontent/scripts/zotadata.js · line 5811
`https://api.core.ac.uk/v3/search/works?q=${encodeURIComponent(`doi:"${doi}"`)}&limit=5`,
api.unpaywall.orgcontent/scripts/zotadata.js · line 6044
const url = `https://api.unpaywall.org/v2/${encodeURIComponent(doi)}?email=${encodeURIComponent(email)}`;
dblp.orgcontent/scripts/zotadata.js · line 9947
`https://dblp.org/search/publ/api?q=${cleanTitle}&format=json&h=10`,

Forks and alternatives

2 other plugins use the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 3 plugins carry the same one, because people copied Zotadata to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Zotadata · this pluginydeng11/zotero-zotadataBUse with care2,12121 Aug 2026
ZotadataCopy · wwsh123/zotero-zotadataBUse with care122 Sep 2026
See all 3 and how they differ →

1 listed fork.

Plugins for the same job

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotadata
BUse with care
Before you install: A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 1 more finding.Read the finding
Compare with similar plugins