Zscaler MCP
by Zscaler
Official listing: built and published by Zscaler. More from Zscaler
Queries and manages Zscaler ZIA, ZPA, ZDX and other Zero Trust services from AI clients, read-only by default, for security and network admins.
Use it now
Keep it with up to 9 other tools you're setting up, then share them all as one link.
Try this first
Ask your assistant, with Zscaler MCP connected:
- ZIA Policy Management
Use Zscaler MCP to list and, once write tools: ‹what you need›
- ZDX Digital Experience
Use Zscaler MCP to retrieve Zscaler Digital Experience monitoring: ‹what you're looking for›
- Z-Insights Analytics
Use Zscaler MCP to query Z-Insights analytics: ‹what you're looking for›
Connect it over MCP
{
"mcpServers": {
"zscaler-mcp": {
"command": "uvx",
"args": [
"zscaler-mcp"
]
}
}
}claude mcp add zscaler-mcp -- uvx zscaler-mcp
It runs on your computer, so web assistants such as Grok and ChatGPT can’t start it.
It may ask you to sign in to Zscaler or for a key when you add it; the setup guide says which.
Setup guide: github.com/zscaler/zscaler-mcp-server
Compare
Press Compare to add it to the tray at the bottom of the window, then pick up to 2 others anywhere on the site.
- Access
- MCP
- Auth
- API Key
- Skills
- 5
Skills
ZIA Policy Management
Lists and, once write tools are allowlisted, changes Zscaler Internet Access firewall rules, URL filtering, and rule labels.
ZPA Application Access
Lists and manages Zscaler Private Access application segments and segment groups that control private app access.
ZDX Digital Experience
Retrieves Zscaler Digital Experience monitoring and analytics data so agents can investigate end-user experience issues.
Z-Insights Analytics
Queries Z-Insights analytics on web traffic, cyber incidents, and shadow IT across your Zscaler tenant.
Guarded Write Operations
Keeps the server read-only until write tools are allowlisted, and confirms every delete with a human prompt or signed token.
