citeguard
citeguard
Отозванные статьи цитируются годами после того, как были отозваны. Сфальсифицированная статья Эндрю Уэйкфилда 1998 года, связывающая вакцину MMR с аутизмом, — отозванная в 2010 году, — цитировалась более тысячи раз после отзыва, и исследователи, у которых не было простого способа узнать об этом. Исследование JMIR 2026 года показало, что свободно доступные AI-инструменты «не могут надёжно распознавать отозванную литературу», как раз тогда, когда AI-помощь в исследованиях и написании текстов переживает взрывной рост. citeguard закрывает этот пробел: проверьте цитату по Crossref — бесплатно, без ключа API, — прежде чем она попадёт в статью, обзор или рецензию.
Три интерфейса, один проверенный алгоритм выявления:
Интерфейс | Назначение | Расположение |
Библиотека Python + CLI | академические авторы, скрипты | |
MCP сервер | AI-агенты, занимающиеся исследованиями и написанием | |
GitHub Action | CI в репозитории лаборатории или журнала |
Почему это построено именно так
Логика выявления не угадана из документации — она построена на обращениях к реальному API Crossref, на изучении фактической структуре ответов и на тестах, опирающихся на сохранённые реальные ответы (зафиксированные в tests/fixtures/, общих для Python- и TypeScript-реализаций). Две реальные статьи задают эталонную основу:
Wakefield et al., 1998, The Lancet (сообщения о связи между MMR и аутизмом): в метаданных самого издателя в Crossref нет структурированных данных об отзыве — одна только проверка
update-toпропустила бы это молча. Сигнал на самом деле несёт отдельное полеupdated-by, куда Crossref добавил задним числом сведения об отзыве (и более ранней правке 2004 года) из базы данных Retraction Watch. Упустить это поле означало бы упустить самую известную отозванную статью в медицине.[Mehra et al., 2020, The Lancet](https://doi.org/10.1016/S0140-6736(20\\\\)31180-6) (статья о COVID/гидроксихлорохине, связанная с Surgisphere): здесь издатель сам прикрепил структурированные данные напрямую, через
update-to. Другое поле, другое происхождение — под этими данными лежит тот же факт.Watson & Crick, 1953, Nature служит чистым контролем в каждом тестовом наборе — статья, которая определённо реальна и точно не отозвана, и которая никогда не должна быть помечена.
Итак, проверяющий модуль смотрит на три независимых сигнала в таком порядке: update-to (указывается издателем), updated-by (часто поступает из Retraction Watch, отражая то, что издатели пропускают), и запасной вариант по префиксу заголовка (например, «RETRACTED:», «WITHDRAWN:») для старых или несвязанных случаев, где структурированных метаданных нет ни в одном поле. Каждый сигнал привязан нужной степени серьёзности: заголовок с «Expression of Concern:» — это не то же самое, что отзыв, и то, что более ранние версии кода стирал это различие, само по себе было ошибкой, которую выявили тесты на реальных заголовках, а не только на синтетических. Полностью комментированная реализация — в src/citeguard/analyze.py.
Related MCP server: Citation Guard
Быстрый старт
CLI:
pip install -e .
citeguard doi 10.1016/S0140-6736(97)11096-0
citeguard file references.bib --fail-on retracted # for CI, see belowMCP server (добавьте в конфигурацию вашего клиента, например .mcp.json):
{ "mcpServers": { "citeguard": { "command": "node", "args": ["/path/to/citeguard/mcp-server/dist/index.js"] } } }GitHub Action (в workflow в другом репозитории):
- uses: wedo911/citeguard@main
with:
path: references.bib
fail-on: concern # never | retracted | concern | correctedЧто это не такое
Не является доказательством того, что содержание статьи корректно. Проверяется только статус отзыва, а не то, устоят не ли результата неотозванной статьи.
Не исчерпывающая. Эвристика по префиксу в заго ловне расп узнаёт только те издательские условности, которыми протестирован; о результат означает «известный сигнал сигнал не найден», а не «гарантированно никогда не отзывавн».
Не инструмент массового скрайпинга. О построен для размера реальной библиографии (десятков citations), with small fixed delay between Crossref requests and optional persistent cache (
src/citeguard/ca.py) — вежливое отношение к бесплатному публичному API, not a tool for scanning millions of DOIs.
Запуск тестов
# Python (55 tests, including against the real fixtures above)
pip install -e ".[dev]" && pytest -v
# MCP server (17 tests against the same real fixtures)
cd mcp-server && npm install && npm run build && npm testОба набора тестов работы и де отделённые(sets) — они работают на закоммитченных реальных API-ответов, а не на живых вызовах, так, поэтому ва они быстрые и не зависят от досту nested by Crossref. Живое сквозное поведение — сам CLI, сам инструмент, реальный API-nic — было отдельно и вручную проверено during development; GOST; GitHub Action также имеет own CI-задака́not чтобы constantly проводить реal API но и на оси оци images etc.,
Вклад
Новые типы сигналов, дополнительные издательски условияй заголовках and ложнопол даетются. Если вы добавляете пример, предпочтительнее его как реальную, цитирующую фиксированную Crossref, а не синтетик, hue evolve em em pamer... Catch these errors: Thus the جمله التصويت interviewing نحن في الكاميرونيّة، وâا، Mahmoud – reconstructions referencing scrambling HTTP-btn. For this, decrement due—volt to ставку "inclusion". Provide raw outputs gener. /From git/Git commit e/script 누락.
Prefer adding a case as a real, cited Crossref fixture over a synthetic one where possible—that's what caught the two real bugs. This project's own test suite found during development (a URL-encoding bug in the DOI request path, and a BibTeX parser that could swallow an adjacent entry when parsing a malformed @comment block).
License
MIT — see LICENSE.
Available Tools
2 toolscheck_citationCheck a Citation for RetractionARead-onlyIdempotent
Check a single DOI against Crossref for retraction, correction, or expression-of-concern status. Use this before citing a paper in a document, summary, or literature review -- retracted papers (including fraudulent or debunked ones) continue to be cited for years after retraction, often because whoever is citing them has no easy way to check. This tool checks three independent signal sources: publisher-asserted updates, Crossref's ingested Retraction Watch data (which catches many retractions the publisher's own metadata misses), and a title-prefix fallback ("RETRACTED:", etc.) for older or unlinked cases.
Args:
doi (string): a DOI, with or without a "https://doi.org/" prefix.
Returns: For JSON format: { "doi": string, "verdict": "retracted" | "concern" | "corrected" | "clean" | "not_found" | "error", "title": string | null, "signals": [ { "type": string, "source": string, "label": string | null, "noticeDoi": string | null, "date": string | null } ], "error": string | null }
Examples:
Use when: about to cite a paper in a summary, report, or literature review -- check it first
Use when: reviewing someone else's bibliography for outdated or unreliable sources
Don't use when: you need to verify a claim's accuracy generally -- this only checks retraction status, not whether the paper's content is correct
Error Handling:
A DOI Crossref doesn't recognize returns verdict "not_found", not an error -- it may still be a real paper Crossref just doesn't index (e.g. some preprints), not necessarily an invalid citation.
| Name | Required | Description | Default |
|---|---|---|---|
| doi | Yes | A DOI, e.g. "10.1016/S0140-6736(97)11096-0" (with or without a "https://doi.org/" prefix). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, open-world, idempotent, and non-destructive behavior, and the description adds substantial context beyond that: three independent signal sources, Retraction Watch ingestion, title-prefix fallback, and the important distinction that an unrecognized DOI returns 'not_found' rather than 'error'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the tool's purpose and well-organized into usage, signal sources, arguments, returns, examples, and error handling. The message is somewhat long for a one-parameter tool, with mild motivational padding about retracted papers continuing to be cited, but the structure is clear and every section is operationally useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Complete given the tool's complexity and missing output schema: it documents the return shape, verdict enum values, signal structure, and key error-handling behavior. Annotations cover the safety profile, so no critical behavioral or call-routing information is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for the single DOI parameter, and the description repeats the same prefix flexibility already documented in the schema. No additional syntax, constraints, or examples beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
State a specific verb and resource ('Check a single DOI against Crossref') and names the exact statuses checked. The word 'single' distinguishes it from the sibling batch tool check_citations without needing to open either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance ('before citing a paper') and a clear when-not-to-use case ('verify a claim's accuracy generally'). It does not explicitly name the sibling check_citations as the alternative for multiple DOIs, so the alternative routing is only implied by the singular scope.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_citationsCheck All Citations in a Block of TextARead-onlyIdempotent
Extract every DOI found in a block of text (a reference list, a paper draft, an exported bibliography) and check each one for retraction/correction/expression-of-concern status via Crossref. Use this to sanity-check a whole reference list at once before finalizing a document, rather than checking citations one at a time.
Finds DOIs in any form: bare ("10.1016/S0140-6736(97)11096-0"), as a doi.org URL, or embedded in a formatted citation. Up to 50 unique DOIs are checked per call; if more are found, only the first 50 (in order of first appearance) are checked and the response says so.
Args:
text (string, 1-200000 chars): the text to scan.
Returns: For JSON format: { "totalFound": number, "checked": number, "truncated": boolean, "results": [ { "doi": string, "verdict": string, "title": string|null, "signals": [...], "error": string|null } ] }
Examples:
Use when: finishing a literature review or research summary -- paste the whole reference list to check it in one call
Don't use when: checking just one citation you already have the DOI for -- use check_citation instead, it's simpler
Error Handling:
Returns an error if text is empty or exceeds 200000 characters. Text with no DOI-shaped substrings returns totalFound: 0, not an error.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | Free text to scan for DOIs -- a reference list, a paper draft with inline citations, or a bibliography exported as plain text. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Although annotations already cover readOnly, idempotent, non-destructive, and openWorld behavior, the description adds substantial behavioral detail beyond them: Crossref lookup semantics, support for bare/doi.org/formatted DOIs, a 50-unique-DOI cap with first-in-order truncation, and explicit error conditions for empty/overlong text and no-DOI text.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with purpose and primary use, then organized into Args, Returns, Examples, and Error Handling. Every section earns its place by explaining batch behavior, output shape, or edge cases that an agent otherwise could not infer.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description supplies the missing return shape, truncation behavior, and error handling. Combined with annotations and a fully documented schema, an agent has everything needed to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single text parameter is already documented in the schema with min/max length and examples. The description's Args section largely restates the schema, so it does not materially deepen parameter semantics beyond what is already structured.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb+resource: extract every DOI in a block of text and check each for retraction/correction/expression-of-concern status via Crossref. It explicitly distinguishes this batch tool from the sibling check_citation by contrasting whole-list checking with one-at-a-time checking.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states exactly when to use this tool ('finishing a literature review or research summary -- paste the whole reference list') and when not to ('checking just one citation you already have the DOI for -- use check_citation instead'). The alternative tool is named and the condition for selecting it is stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.1.2- First observed
check_citation - First observed
check_citations
TDQS
Scored across 2 tools
check_citations (bulk scan of text) and check_citation (single DOI) have overlapping purposes, and the near-identical singular/plural names invite misselection. However, each description explicitly cross-references the other with 'use X instead' guidance, so an agent can reliably choose the right one.
Both tools use consistent snake_case with a clear verb_noun shape, and the singular/plural convention neatly signals single vs. bulk behavior. The only downside is that the two names differ by a single character, which is a mild collision risk.
Two tools is on the thin side, but the domain (checking retraction status of DOIs) is genuinely narrow and the single/bulk split is the one meaningful axis of variation. Nothing feels gratuitous, though a third tool would be hard to justify.
The surface covers the core lifecycle: check one DOI, check many DOIs in a block of text, with defined verdicts and error handling. A minor gap is the absence of any way to resolve a citation lacking a DOI (e.g. by title/author) into a checkable identifier.
Maintenance
Related MCP Connectors
Catch AI-fabricated citations (real DOI + fake title). Retraction, open-access, 10,000+ CSL styles.
Checks AI-written references against Crossref, PubMed and OpenAlex. Formats citations, PRISMA.
Real-time fact-check, citation verification, and source-freshness for AI agents.
Live web checks for AI agents: sitemaps, robots.txt, URL status, broken links, feeds, citations.
Related MCP Servers
- AlicenseAqualityDmaintenancePrevents citation hallucination by verifying academic citations against CrossRef's database of 150+ million publications before they can be mentioned, ensuring every citation includes a valid DOI.316MIT
- AlicenseNot gradedqualityDmaintenanceVerifies citations in reference lists by checking DOIs against public registries to catch AI-hallucinated or mismatched citations.MIT

CiteStamp MCP serverofficial
AlicenseNot gradedqualityBmaintenanceGround citations before your agent emits them by checking references against public scholarly registries and flagging hallucinated or retracted ones.MIT- AlicenseAqualityCmaintenanceProvides MCP tools to check reference lists for retracted or problematic citations, retrieve nuanced editorial statuses with evidence, and monitor institutions for newly flagged papers using open data from OpenAlex, Retraction Watch, and Crossref.327 PyPIMIT