Zscaler MCP Server
Connects AI agents with the Zscaler Zero Trust Exchange platform to manage products like ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, and EASM. It operates in read-only mode by default for security, requiring explicit opt-in for write operations, and supports various deployment methods including Docker and cloud environments.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- List ZPA Application segments
- List ZPA Segment Groups
- List ZIA Rule Labels
- Manage Zscaler Zero Trust Exchange products
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
docker.io/zscaler/zscaler-mcp-server:latest
{
"transport": "stdio",
"identifier": "docker.io/zscaler/zscaler-mcp-server:latest",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "-e",
"type": "named",
"value": "ZSCALER_CLIENT_ID={client_id}",
"variables": {
"client_id": {
"format": "string",
"isRequired": true
}
},
"isRequired": true,
"description": "Zscaler OneAPI Client ID from ZIdentity console."
},
{
"name": "-e",
"type": "named",
"value": "ZSCALER_CLIENT_SECRET={client_secret}",
"variables": {},
"isRequired": true,
"description": "Zscaler OneAPI Client Secret from ZIdentity console."
},
{
"name": "-e",
"type": "named",
"value": "ZSCALER_CUSTOMER_ID={customer_id}",
"variables": {
"customer_id": {
"format": "string",
"isRequired": true
}
},
"isRequired": true,
"description": "Zscaler Customer ID from ZIdentity console."
},
{
"name": "-e",
"type": "named",
"value": "ZSCALER_VANITY_DOMAIN={vanity_domain}",
"variables": {
"vanity_domain": {
"format": "string",
"isRequired": true
}
},
"isRequired": true,
"description": "Zscaler vanity domain (e.g. mycompany.zscloud.net)."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"zscaler-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/zscaler/zscaler-mcp-server:latest"
]
}
}
}Cline
{
"mcpServers": {
"zscaler-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/zscaler/zscaler-mcp-server:latest"
]
}
}
}VS Code
{
"servers": {
"zscaler-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/zscaler/zscaler-mcp-server:latest"
]
}
}
}Claude Desktop
{
"mcpServers": {
"zscaler-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/zscaler/zscaler-mcp-server:latest"
]
}
}
}Let your agent find its tools
Find servers like Zscaler MCP Server from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.