
Zscaler Zero Trust Exchange
A comprehensive bridge to Zscaler's Zero Trust Exchange platform, exposing over 280 tools across ZPA, ZIA, ZDX, ZCC, and EASM through the Model Context Protocol. Ships in read-only mode by default, which makes sense given the scope: you can list application segments, segment groups, firewall rules, and policy configurations without risk. When you need to provision or modify resources, you explicitly opt in with an allowlist of write operations. It's packaged as a Python module with stdio transport, runs via uvx or Docker, and integrates with Claude Desktop, Cursor, and VS Code. The setup requires Zscaler API credentials and supports both individual service authentication and OneAPI tokens for multi-service access.
- GitHub stars
- 55
- tool
- 1
- auth
- Secret needed
- transport
- STDIO
- env vars
- 4
- last updated
- Aug 19, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
zcc_list_devicesExample of the query parameter: zcc_list_devices(query="[*].{user: user, policy: policyName}") with JMESPath projection.
Example of the query parameter: zcc_list_devices(query="[*].{user: user, policy: policyName}") with JMESPath projection.
No parameter schema in public metadata yet.
Sponsors
Configuration
ZSCALER_CLIENT_ID*secretZscaler OneAPI Client ID from ZIdentity console.
ZSCALER_CLIENT_SECRET*secretZscaler OneAPI Client Secret from ZIdentity console.
ZSCALER_CUSTOMER_ID*Zscaler Customer ID from ZIdentity console.
ZSCALER_VANITY_DOMAIN*Zscaler vanity domain (e.g. mycompany.zscloud.net).
Readme
Details
- Repository
- github.com/zscaler/zscaler-mcp-server
- Website
- github.com/zscaler/zscaler-mcp-server
- Package
zscaler-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active