zscaler — Agent Skill

zscaler-mcp-server is a Model Context Protocol (MCP) server that connects AI agents with the Zscaler Zero Trust Exchange platform. By default, the server operates in read-only mode for security, requiring explicit opt-in to enable write operations.

Support Disclaimer

-> Disclaimer: Please refer to our General Support Statement before proceeding with the use of this provider. You can also refer to our troubleshooting guide for guidance on typical problems.

[!IMPORTANT] 🚧 Public Preview: This project is currently in public preview and under active development. Features and functionality may change before the stable 1.0 release. While we encourage exploration and testing, please avoid production deployments. We welcome your feedback through GitHub Issues to help shape the final release.

📄 Table of contents

• 📺 Overview
• 🔒 Security & Permissions
• 🔐 MCP Client Authentication
• Supported Tools
• Installation & Setup
• Prerequisites
• Environment Configuration
• Installation
• Usage
• Command Line
• Service Configuration
• Additional Command Line Options
• Zscaler API Credentials & Authentication
• OneAPI Authentication
• Authentication Troubleshooting
• MCP Server Configuration
• As a Library
• Container Usage
• Using Pre-built Image (Recommended)
• Building Locally (Development)
• Editor/Assistant Integration
• Using `uvx` (recommended)
• With Service Selection
• Using Individual Environment Variables
• Docker Version
• Additional Deployment Options
• Remote MCP Deployment (EC2, VM, etc.)
• Azure Container Apps / Virtual Machine / AKS (Preview)
• Google Cloud (Cloud Run / GKE / VM / ADK Agent)
• Kubernetes (Helm Chart)
• Amazon Bedrock AgentCore
• Using the MCP Server with Agents
• Claude Desktop
• Cursor
• Visual Studio Code + GitHub Copilot
• Platform Integrations
• Troubleshooting
• License

📺 Overview

The Zscaler Integrations MCP Server brings context to your agents. Try prompts like:

• "List my ZPA Application segments"
• "List my ZPA Segment Groups"
• "List my ZIA Rule Labels"

[!WARNING] 🔒 READ-ONLY BY DEFAULT: For security, this MCP server operates in read-only mode by default. Only list_* and get_* operations are available. To enable tools that can CREATE, UPDATE, or DELETE Zscaler resources, you must explicitly enable write mode using the --enable-write-tools flag or by setting ZSCALER_MCP_WRITE_ENABLED=true. See the Security & Permissions section for details.

[!TIP] Writing effective prompts: This server exposes 402 tools across multiple Zscaler services. Most MCP clients (Claude Desktop, Cursor, etc.) use deferred tool loading and will search for relevant tools based on your prompt. For best results, be specific about the service and action in your prompts: - Good: *"List my ZPA application segments"* — targets the right service and tool directly - Good: *"Show ZIA firewall rules"* — clear service (zia) and action (list) - Less effective: *"Show me my devices"* — ambiguous; multiple services expose device-related tools When a service is disabled, its tools are fully removed from the server. However, the AI agent may still attempt to find related tools in other services. If you get unexpected results, refine your prompt with the specific service name (e.g. zpa, zia, zdx, zcc, zcell, zms).

🔒 Security & Permissions

The Zscaler MCP Server implements a security-first design with granular permission controls and safe defaults:

Read-Only Mode (Default - Always Available)