zscaler avatar

Zscaler Zero Trust Exchange

zscaler/zscaler-mcp-server

A comprehensive bridge to Zscaler's Zero Trust Exchange platform, exposing over 280 tools across ZPA, ZIA, ZDX, ZCC, and EASM through the Model Context Protocol. Ships in read-only mode by default, which makes sense given the scope: you can list application segments, segment groups, firewall rules, and policy configurations without risk. When you need to provision or modify resources, you explicitly opt in with an allowlist of write operations. It's packaged as a Python module with stdio transport, runs via uvx or Docker, and integrates with Claude Desktop, Cursor, and VS Code. The setup requires Zscaler API credentials and supports both individual service authentication and OneAPI tokens for multi-service access.

GitHub stars
55
tool
1
auth
Secret needed
transport
STDIO
env vars
4
last updated
Aug 19, 2026

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

zcc_list_devicesExample of the query parameter: zcc_list_devices(query="[*].{user: user, policy: policyName}") with JMESPath projection.

Example of the query parameter: zcc_list_devices(query="[*].{user: user, policy: policyName}") with JMESPath projection.

No parameter schema in public metadata yet.

Sponsors

Configuration

ZSCALER_CLIENT_ID*secret

Zscaler OneAPI Client ID from ZIdentity console.

ZSCALER_CLIENT_SECRET*secret

Zscaler OneAPI Client Secret from ZIdentity console.

ZSCALER_CUSTOMER_ID*

Zscaler Customer ID from ZIdentity console.

ZSCALER_VANITY_DOMAIN*

Zscaler vanity domain (e.g. mycompany.zscloud.net).

Readme

Details

Repository
github.com/zscaler/zscaler-mcp-server
Website
github.com/zscaler/zscaler-mcp-server
Package
zscaler-mcp
Transport
STDIO
Auth
Required
Registry
MCP registry, active