Zscaler MCP Server Connector Risk

Assess and monitor the risk of the Zscaler MCP Server connector in Anthropic Claude, OpenAI Codex, and Microsoft Copilot.

Zscaler MCP Server — AI-powered management of the Zscaler Zero Trust Exchange across ZIA, ZPA, ZDX, ZCC, ZTW, ZIdentity, EASM, Z-Insights, and ZMS via the Model Context Protocol.

Book a connector risk demo

Viewing Details For

Connector Details

Zscaler MCP Server is a Model Context Protocol (MCP) server for managing Zscaler products with LLMs (Claude, ChatGPT, Gemini, etc.). It exposes hundreds of tools across nine Zscaler services. Read-only operations are available by default; create / update / delete tools require explicit allowlisting via the 'Enable Write Tools' and 'Write Tools Allowlist' settings below, and destructive operations additionally require an in-session HMAC confirmation token.

Type: Local
Works With: claude-desktop
Visibility: commercial
Added: 6/23/2026

Documentation Support

Tools the Zscaler MCP Server Connector Exposes to Anthropic Claude

zscaler_check_connectivity

zscaler_enable_toolset

zscaler_get_available_services

zscaler_get_toolset_tools

zscaler_list_toolsets

get_zia_dlp_dictionaries

get_zia_dlp_engines

get_zia_user_departments

get_zia_user_groups

get_zia_users

zia_activate_configuration

zia_add_atp_malicious_urls

zia_add_auth_exempt_urls

zia_add_urls_to_category

zia_bulk_update_shadow_it_apps

zia_create_cloud_app_control_rule

zia_create_cloud_firewall_dns_rule

zia_create_cloud_firewall_ips_rule

zia_create_cloud_firewall_rule

zia_create_file_type_control_rule

zia_create_gre_tunnel

zia_create_ip_destination_group

zia_create_ip_source_group

zia_create_ips_signature_rule

zia_create_location

zia_create_network_app_group

zia_create_network_service

zia_create_network_svc_group

zia_create_rule_label

zia_create_sandbox_rule

zia_create_ssl_inspection_rule

zia_create_static_ip

zia_create_time_interval

zia_create_url_category

zia_create_url_filtering_rule

zia_create_vpn_credential

zia_create_web_dlp_rule

zia_delete_atp_malicious_urls

zia_delete_auth_exempt_urls

zia_delete_cloud_app_control_rule

zia_delete_cloud_firewall_dns_rule

zia_delete_cloud_firewall_ips_rule

zia_delete_cloud_firewall_rule

zia_delete_file_type_control_rule

zia_delete_gre_tunnel

zia_delete_ip_destination_group

zia_delete_ip_source_group

zia_delete_ips_signature_rule

zia_delete_location

zia_delete_network_app_group

zia_delete_network_service

zia_delete_network_svc_group

zia_delete_rule_label

zia_delete_sandbox_rule

zia_delete_ssl_inspection_rule

zia_delete_static_ip

zia_delete_time_interval

zia_delete_url_category

zia_delete_url_filtering_rule

zia_delete_vpn_credential

zia_delete_web_dlp_rule

zia_geo_search

zia_get_activation_status

zia_get_advanced_settings

zia_get_atp_malware_inspection

zia_get_atp_malware_policy

zia_get_atp_malware_protocols

zia_get_atp_security_exceptions

zia_get_atp_settings

zia_get_cloud_app_control_rule

zia_get_cloud_firewall_dns_rule

zia_get_cloud_firewall_ips_rule

zia_get_cloud_firewall_rule

zia_get_file_type_control_rule

zia_get_gre_tunnel

zia_get_ip_destination_group

zia_get_ip_source_group

zia_get_ips_signature_rule

zia_get_location

zia_get_location_group

zia_get_malware_settings

zia_get_mobile_advanced_settings

zia_get_network_app

zia_get_network_app_group

zia_get_network_service

zia_get_network_svc_group

zia_get_rule_label

zia_get_sandbox_behavioral_analysis

zia_get_sandbox_file_hash_count

zia_get_sandbox_quota

zia_get_sandbox_report

zia_get_sandbox_rule

zia_get_ssl_inspection_rule

zia_get_static_ip

zia_get_time_interval

zia_get_url_category

zia_get_url_category_predefined

zia_get_url_filtering_rule

zia_get_vpn_credential

zia_get_web_dlp_rule

zia_get_workload_group

zia_list_atp_malicious_urls

zia_list_auth_exempt_urls

zia_list_cloud_app_control_actions

zia_list_cloud_app_control_rules

zia_list_cloud_app_policy

zia_list_cloud_app_ssl_policy

zia_list_cloud_firewall_dns_rules

zia_list_cloud_firewall_ips_rules

zia_list_cloud_firewall_rules

zia_list_device_groups

zia_list_devices

zia_list_devices_lite

zia_list_file_type_categories

zia_list_file_type_control_rules

zia_list_gre_ranges

zia_list_gre_tunnels

zia_list_ip_destination_groups

zia_list_ip_source_groups

zia_list_ips_signature_rules

zia_list_location_groups

zia_list_locations

zia_list_network_app_groups

zia_list_network_apps

zia_list_network_services

zia_list_network_svc_groups

zia_list_rule_labels

zia_list_sandbox_rules

zia_list_shadow_it_apps

zia_list_shadow_it_custom_tags

zia_list_ssl_inspection_rules

zia_list_static_ips

zia_list_time_intervals

zia_list_url_categories

zia_list_url_filtering_rules

zia_list_vpn_credentials

zia_list_web_dlp_rules

zia_list_web_dlp_rules_lite

zia_list_workload_groups

zia_remove_urls_from_category

zia_update_advanced_settings

zia_update_atp_malware_inspection

zia_update_atp_malware_policy

zia_update_atp_malware_protocols

zia_update_atp_security_exceptions

zia_update_atp_settings

zia_update_cloud_app_control_rule

zia_update_cloud_firewall_dns_rule

zia_update_cloud_firewall_ips_rule

zia_update_cloud_firewall_rule

zia_update_file_type_control_rule

zia_update_ip_destination_group

zia_update_ip_source_group

zia_update_ips_signature_rule

zia_update_location

zia_update_malware_settings

zia_update_mobile_advanced_settings

zia_update_network_app_group

zia_update_network_service

zia_update_network_svc_group

zia_update_rule_label

zia_update_sandbox_rule

zia_update_ssl_inspection_rule

zia_update_static_ip

zia_update_time_interval

zia_update_url_category

zia_update_url_category_predefined

zia_update_url_filtering_rule

zia_update_vpn_credential

zia_update_web_dlp_rule

zia_url_lookup

get_zpa_app_protection_profile

get_zpa_app_segments_by_type

get_zpa_enrollment_certificate

get_zpa_isolation_profile

get_zpa_posture_profile

get_zpa_saml_attribute

get_zpa_scim_attribute

get_zpa_scim_group

get_zpa_trusted_network

zpa_bulk_delete_app_connectors

zpa_bulk_delete_service_edges

zpa_create_access_policy_rule

zpa_create_app_connector_group

zpa_create_app_protection_rule

zpa_create_application_segment

zpa_create_application_segment_ba

zpa_create_application_segment_pra

zpa_create_application_server

zpa_create_ba_certificate

zpa_create_forwarding_policy_rule

zpa_create_isolation_policy_rule

zpa_create_pra_credential

zpa_create_pra_portal

zpa_create_provisioning_key

zpa_create_segment_group

zpa_create_server_group

zpa_create_service_edge_group

zpa_create_timeout_policy_rule

zpa_delete_access_policy_rule

zpa_delete_app_connector

zpa_delete_app_connector_group

zpa_delete_app_protection_rule

zpa_delete_application_segment

zpa_delete_application_segment_ba

zpa_delete_application_segment_pra

zpa_delete_application_server

zpa_delete_ba_certificate

zpa_delete_forwarding_policy_rule

zpa_delete_isolation_policy_rule

zpa_delete_pra_credential

zpa_delete_pra_portal

zpa_delete_provisioning_key

zpa_delete_segment_group

zpa_delete_server_group

zpa_delete_service_edge

zpa_delete_service_edge_group

zpa_delete_timeout_policy_rule

zpa_get_access_policy_rule

zpa_get_app_connector

zpa_get_app_connector_group

zpa_get_app_protection_rule

zpa_get_application_segment

zpa_get_application_segment_ba

zpa_get_application_segment_pra

zpa_get_application_server

zpa_get_ba_certificate

zpa_get_forwarding_policy_rule

zpa_get_isolation_policy_rule

zpa_get_lss_config

zpa_get_lss_log_format

zpa_get_pra_credential

zpa_get_pra_portal

zpa_get_provisioning_key

zpa_get_segment_group

zpa_get_server_group

zpa_get_service_edge

zpa_get_service_edge_group

zpa_get_timeout_policy_rule

zpa_list_access_policy_rules

zpa_list_app_connector_groups

zpa_list_app_connectors

zpa_list_app_protection_rules

zpa_list_application_segments

zpa_list_application_segments_ba

zpa_list_application_segments_pra

zpa_list_application_servers

zpa_list_ba_certificates

zpa_list_forwarding_policy_rules

zpa_list_isolation_policy_rules

zpa_list_lss_client_types

zpa_list_lss_configs

zpa_list_lss_log_types

zpa_list_lss_status_codes

zpa_list_pra_credentials

zpa_list_pra_portals

zpa_list_provisioning_keys

zpa_list_segment_groups

zpa_list_server_groups

zpa_list_service_edge_groups

zpa_list_service_edges

zpa_list_timeout_policy_rules

zpa_update_access_policy_rule

zpa_update_app_connector

zpa_update_app_connector_group

zpa_update_app_protection_rule

zpa_update_application_segment

zpa_update_application_segment_ba

zpa_update_application_segment_pra

zpa_update_application_server

zpa_update_forwarding_policy_rule

zpa_update_isolation_policy_rule

zpa_update_pra_credential

zpa_update_pra_portal

zpa_update_provisioning_key

zpa_update_segment_group

zpa_update_server_group

zpa_update_service_edge

zpa_update_service_edge_group

zpa_update_timeout_policy_rule

zdx_delete_analysis

zdx_delete_deeptrace

zdx_get_alert

zdx_get_analysis

zdx_get_application

zdx_get_application_metric

zdx_get_application_score_trend

zdx_get_application_user

zdx_get_deeptrace_cloudpath

zdx_get_deeptrace_cloudpath_metrics

zdx_get_deeptrace_events

zdx_get_deeptrace_health_metrics

zdx_get_deeptrace_webprobe_metrics

zdx_get_device

zdx_get_device_deep_trace

zdx_get_software_details

zdx_get_web_probes

zdx_list_alert_affected_devices

zdx_list_alerts

zdx_list_application_users

zdx_list_applications

zdx_list_cloudpath_probes

zdx_list_deeptrace_top_processes

zdx_list_departments

zdx_list_device_deep_traces

zdx_list_devices

zdx_list_historical_alerts

zdx_list_locations

zdx_list_software

zdx_start_analysis

zdx_start_deeptrace

zcc_get_device_otp

zcc_list_devices

zcc_list_forwarding_profiles

zcc_list_trusted_networks

ztw_create_ip_destination_group

ztw_create_ip_group

ztw_create_ip_source_group

ztw_delete_ip_destination_group

ztw_delete_ip_group

ztw_delete_ip_source_group

ztw_get_discovery_settings

ztw_list_admins

ztw_list_ip_destination_groups

ztw_list_ip_destination_groups_lite

ztw_list_ip_groups

ztw_list_ip_groups_lite

ztw_list_ip_source_groups

ztw_list_ip_source_groups_lite

ztw_list_network_service_groups

ztw_list_network_services

ztw_list_public_account_details

ztw_list_public_cloud_info

ztw_list_roles

zid_get_group

zid_get_group_users

zid_get_group_users_by_name

zid_get_user

zid_get_user_groups

zid_get_user_groups_by_name

zid_list_groups

zid_list_users

zid_search_groups

zid_search_users

zeasm_get_finding_details

zeasm_get_finding_evidence

zeasm_get_finding_scan_output

zeasm_get_lookalike_domain

zeasm_list_findings

zeasm_list_lookalike_domains

zeasm_list_organizations

zins_get_casb_app_report

zins_get_cyber_incidents

zins_get_cyber_incidents_by_location

zins_get_cyber_incidents_by_threat_and_app

zins_get_cyber_incidents_daily

zins_get_firewall_by_action

zins_get_firewall_by_location

zins_get_firewall_network_services

zins_get_iot_device_stats

zins_get_shadow_it_apps

zins_get_shadow_it_summary

zins_get_threat_class

zins_get_threat_super_categories

zins_get_web_protocols

zins_get_web_traffic_by_location

zins_get_web_traffic_no_grouping

zms_get_agent_connection_status_statistics

zms_get_agent_group_totp_secrets

zms_get_agent_version_statistics

zms_get_metadata

zms_get_nonce

zms_get_resource_group_members

zms_get_resource_group_protection_status

zms_get_resource_protection_status

zms_list_agent_groups

zms_list_agents

zms_list_app_catalog

zms_list_app_zones

zms_list_default_policy_rules

zms_list_nonces

zms_list_policy_rules

zms_list_resource_groups

zms_list_resources

zms_list_tag_keys

zms_list_tag_namespaces

zms_list_tag_values

Want a live walkthrough of this connector?

PromptArmor tracks connector risk across Claude, Codex, Copilot, and other MCP-enabled platforms. Book a demo to see the live connector risk dashboard for your environment.

Book a demo