Capabilities & trust model¶

The machine-readable registry every command is classified against — read vs. write, where writes land, whether they are destructive, and what they require. Emit it live with zotio capabilities or over MCP as zotero://capabilities.

Command	Operation	Write target	Destructive	Requires
`analytics`	read
`annotations export`	read
`annotations search`	read
`annotations timeline`	read
`auth logout`	other
`auth set-token`	other
`auth status`	other
`collections bundle`	read
`collections create`	write	`web_api`		`web_api_key`
`collections delete`	write	`web_api`	yes	`web_api_key`
`collections export`	read
`collections gaps`	read
`collections get`	read
`collections items`	read
`collections list`	read
`collections move`	write	`web_api`		`web_api_key`
`collections stats`	read
`collections subcollections`	read
`collections tags`	read
`collections top`	read
`collections update`	write	`web_api`		`web_api_key`
`creators audit`	read			`synced_store`
`creators audit fix`	write	`web_api`		`synced_store`
`demo`	read
`doctor`	introspect
`export`	other
`export snapshot`	read
`export snapshot verify`	read			`synced_store`
`feedback`	other
`feedback list`	other
`groups inspect`	read
`groups list`	read
`import`	other
`import apply`	write	`web_api`		`web_api_key`
`import arxiv`	write	`web_api`		`web_api_key`
`import discover`	read			`synced_store`
`import doi`	write	`web_api`		`web_api_key`
`import file`	write	`web_api`		`web_api_key`
`import isbn`	write	`web_api`		`web_api_key`
`import pdf`	write	`desktop_connector`		`desktop_connector`
`import pmid`	write	`web_api`		`web_api_key`
`import resolve`	read
`import scan`	read
`import targets`	read			`desktop_connector`
`import translators`	read			`desktop_connector`
`import url`	write	`web_api`		`web_api_key`
`init`	other
`items annotations`	read
`items audit`	read			`synced_store`
`items authors`	read
`items bibcheck`	read			`synced_store`, `better_bibtex`
`items bibliography`	read			`web_api_key`
`items children`	read
`items cite`	read
`items citekey-conflicts`	read			`synced_store`, `better_bibtex`
`items collections-of`	read
`items create`	write	`web_api`		`web_api_key`
`items delete`	write	`web_api`	yes	`web_api_key`
`items duplicates`	read			`synced_store`
`items duplicates resolve`	write	`web_api`	yes	`web_api_key`
`items enrich`	write	`web_api`		`web_api_key`
`items file`	read			`live_local_api`
`items find`	read
`items fulltext`	read			`live_local_api`
`items get`	read
`items list`	read
`items missing-pdf`	read			`synced_store`
`items move`	write	`web_api`		`web_api_key`
`items new`	write	`web_api`		`web_api_key`
`items note-template`	read
`items open`	other
`items preprint-check`	read
`items preprint-check fix`	other
`items recent`	read
`items related`	read			`synced_store`
`items restore`	write	`web_api`		`web_api_key`
`items retract-check`	read
`items stale`	read
`items summarize`	read			`synced_store`
`items tags`	read
`items tags add`	write	`web_api`		`web_api_key`
`items tags list`	read
`items tags remove`	write	`web_api`		`web_api_key`
`items top`	read
`items trash`	read
`items unfiled`	read
`items update`	write	`web_api`		`web_api_key`
`items venues`	read
`journal list`	read
`journal show`	read
`journal undo`	write	`web_api`		`web_api_key`
`library health`	read			`synced_store`
`library stats`	read			`synced_store`
`library wrapped`	read
`profile delete`	other
`profile list`	other
`profile save`	other
`profile show`	other
`profile use`	other
`reading-list`	read
`reading-list add`	write	`web_api`		`web_api_key`
`reading-list done`	write	`web_api`		`web_api_key`
`reading-list start`	write	`web_api`		`web_api_key`
`schema creator-fields`	read
`schema drift`	read
`schema item-fields`	read
`schema item-type-creator-types`	read
`schema item-type-fields`	read
`schema item-types`	read
`schema new-item-template`	read			`web_api_key`
`search`	other
`searches get`	read
`searches list`	read
`searches materialize`	write	`web_api`		`web_api_key`
`searches run`	read			`live_local_api`
`sync`	sync
`tags audit`	read			`synced_store`
`tags audit fix`	write	`web_api`		`web_api_key`
`tags get`	read
`tags inventory`	read			`synced_store`
`tags list`	read
`tags rename`	write	`web_api`		`web_api_key`
`tail`	read
`vault audit`	read
`vault conflicts`	read
`vault pull`	other
`vault push`	write	`web_api`		`web_api_key`
`vault resolve`	write	`web_api`		`web_api_key`
`vault sync`	other
`version`	introspect
`watch`	sync
`which`	introspect
`workflow archive`	other
`workflow run`	other
`workflow status`	read