PromptArmorBook a Demo
Zscaler MCP Server icon

Zscaler MCP Server Connector Risk

Assess and monitor the risk of the Zscaler MCP Server connector in Anthropic Claude, OpenAI Codex, and Microsoft Copilot.

Zscaler MCP Server — AI-powered management of the Zscaler Zero Trust Exchange across ZIA, ZPA, ZDX, ZCC, ZTW, ZIdentity, EASM, Z-Insights, and ZMS via the Model Context Protocol.

Viewing Details For

Connector Details

Zscaler MCP Server is a Model Context Protocol (MCP) server for managing Zscaler products with LLMs (Claude, ChatGPT, Gemini, etc.). It exposes hundreds of tools across nine Zscaler services. Read-only operations are available by default; create / update / delete tools require explicit allowlisting via the 'Enable Write Tools' and 'Write Tools Allowlist' settings below, and destructive operations additionally require an in-session HMAC confirmation token.

Type
Local
Works With
claude-desktop
Visibility
commercial
Added
6/23/2026

Tools the Zscaler MCP Server Connector Exposes to Anthropic Claude

zscaler_check_connectivity
zscaler_enable_toolset
zscaler_get_available_services
zscaler_get_toolset_tools
zscaler_list_toolsets
get_zia_dlp_dictionaries
get_zia_dlp_engines
get_zia_user_departments
get_zia_user_groups
get_zia_users
zia_activate_configuration
zia_add_atp_malicious_urls
zia_add_auth_exempt_urls
zia_add_urls_to_category
zia_bulk_update_shadow_it_apps
zia_create_cloud_app_control_rule
zia_create_cloud_firewall_dns_rule
zia_create_cloud_firewall_ips_rule
zia_create_cloud_firewall_rule
zia_create_file_type_control_rule
zia_create_gre_tunnel
zia_create_ip_destination_group
zia_create_ip_source_group
zia_create_ips_signature_rule
zia_create_location
zia_create_network_app_group
zia_create_network_service
zia_create_network_svc_group
zia_create_rule_label
zia_create_sandbox_rule
zia_create_ssl_inspection_rule
zia_create_static_ip
zia_create_time_interval
zia_create_url_category
zia_create_url_filtering_rule
zia_create_vpn_credential
zia_create_web_dlp_rule
zia_delete_atp_malicious_urls
zia_delete_auth_exempt_urls
zia_delete_cloud_app_control_rule
zia_delete_cloud_firewall_dns_rule
zia_delete_cloud_firewall_ips_rule
zia_delete_cloud_firewall_rule
zia_delete_file_type_control_rule
zia_delete_gre_tunnel
zia_delete_ip_destination_group
zia_delete_ip_source_group
zia_delete_ips_signature_rule
zia_delete_location
zia_delete_network_app_group
zia_delete_network_service
zia_delete_network_svc_group
zia_delete_rule_label
zia_delete_sandbox_rule
zia_delete_ssl_inspection_rule
zia_delete_static_ip
zia_delete_time_interval
zia_delete_url_category
zia_delete_url_filtering_rule
zia_delete_vpn_credential
zia_delete_web_dlp_rule
zia_geo_search
zia_get_activation_status
zia_get_advanced_settings
zia_get_atp_malware_inspection
zia_get_atp_malware_policy
zia_get_atp_malware_protocols
zia_get_atp_security_exceptions
zia_get_atp_settings
zia_get_cloud_app_control_rule
zia_get_cloud_firewall_dns_rule
zia_get_cloud_firewall_ips_rule
zia_get_cloud_firewall_rule
zia_get_file_type_control_rule
zia_get_gre_tunnel
zia_get_ip_destination_group
zia_get_ip_source_group
zia_get_ips_signature_rule
zia_get_location
zia_get_location_group
zia_get_malware_settings
zia_get_mobile_advanced_settings
zia_get_network_app
zia_get_network_app_group
zia_get_network_service
zia_get_network_svc_group
zia_get_rule_label
zia_get_sandbox_behavioral_analysis
zia_get_sandbox_file_hash_count
zia_get_sandbox_quota
zia_get_sandbox_report
zia_get_sandbox_rule
zia_get_ssl_inspection_rule
zia_get_static_ip
zia_get_time_interval
zia_get_url_category
zia_get_url_category_predefined
zia_get_url_filtering_rule
zia_get_vpn_credential
zia_get_web_dlp_rule
zia_get_workload_group
zia_list_atp_malicious_urls
zia_list_auth_exempt_urls
zia_list_cloud_app_control_actions
zia_list_cloud_app_control_rules
zia_list_cloud_app_policy
zia_list_cloud_app_ssl_policy
zia_list_cloud_firewall_dns_rules
zia_list_cloud_firewall_ips_rules
zia_list_cloud_firewall_rules
zia_list_device_groups
zia_list_devices
zia_list_devices_lite
zia_list_file_type_categories
zia_list_file_type_control_rules
zia_list_gre_ranges
zia_list_gre_tunnels
zia_list_ip_destination_groups
zia_list_ip_source_groups
zia_list_ips_signature_rules
zia_list_location_groups
zia_list_locations
zia_list_network_app_groups
zia_list_network_apps
zia_list_network_services
zia_list_network_svc_groups
zia_list_rule_labels
zia_list_sandbox_rules
zia_list_shadow_it_apps
zia_list_shadow_it_custom_tags
zia_list_ssl_inspection_rules
zia_list_static_ips
zia_list_time_intervals
zia_list_url_categories
zia_list_url_filtering_rules
zia_list_vpn_credentials
zia_list_web_dlp_rules
zia_list_web_dlp_rules_lite
zia_list_workload_groups
zia_remove_urls_from_category
zia_update_advanced_settings
zia_update_atp_malware_inspection
zia_update_atp_malware_policy
zia_update_atp_malware_protocols
zia_update_atp_security_exceptions
zia_update_atp_settings
zia_update_cloud_app_control_rule
zia_update_cloud_firewall_dns_rule
zia_update_cloud_firewall_ips_rule
zia_update_cloud_firewall_rule
zia_update_file_type_control_rule
zia_update_ip_destination_group
zia_update_ip_source_group
zia_update_ips_signature_rule
zia_update_location
zia_update_malware_settings
zia_update_mobile_advanced_settings
zia_update_network_app_group
zia_update_network_service
zia_update_network_svc_group
zia_update_rule_label
zia_update_sandbox_rule
zia_update_ssl_inspection_rule
zia_update_static_ip
zia_update_time_interval
zia_update_url_category
zia_update_url_category_predefined
zia_update_url_filtering_rule
zia_update_vpn_credential
zia_update_web_dlp_rule
zia_url_lookup
get_zpa_app_protection_profile
get_zpa_app_segments_by_type
get_zpa_enrollment_certificate
get_zpa_isolation_profile
get_zpa_posture_profile
get_zpa_saml_attribute
get_zpa_scim_attribute
get_zpa_scim_group
get_zpa_trusted_network
zpa_bulk_delete_app_connectors
zpa_bulk_delete_service_edges
zpa_create_access_policy_rule
zpa_create_app_connector_group
zpa_create_app_protection_rule
zpa_create_application_segment
zpa_create_application_segment_ba
zpa_create_application_segment_pra
zpa_create_application_server
zpa_create_ba_certificate
zpa_create_forwarding_policy_rule
zpa_create_isolation_policy_rule
zpa_create_pra_credential
zpa_create_pra_portal
zpa_create_provisioning_key
zpa_create_segment_group
zpa_create_server_group
zpa_create_service_edge_group
zpa_create_timeout_policy_rule
zpa_delete_access_policy_rule
zpa_delete_app_connector
zpa_delete_app_connector_group
zpa_delete_app_protection_rule
zpa_delete_application_segment
zpa_delete_application_segment_ba
zpa_delete_application_segment_pra
zpa_delete_application_server
zpa_delete_ba_certificate
zpa_delete_forwarding_policy_rule
zpa_delete_isolation_policy_rule
zpa_delete_pra_credential
zpa_delete_pra_portal
zpa_delete_provisioning_key
zpa_delete_segment_group
zpa_delete_server_group
zpa_delete_service_edge
zpa_delete_service_edge_group
zpa_delete_timeout_policy_rule
zpa_get_access_policy_rule
zpa_get_app_connector
zpa_get_app_connector_group
zpa_get_app_protection_rule
zpa_get_application_segment
zpa_get_application_segment_ba
zpa_get_application_segment_pra
zpa_get_application_server
zpa_get_ba_certificate
zpa_get_forwarding_policy_rule
zpa_get_isolation_policy_rule
zpa_get_lss_config
zpa_get_lss_log_format
zpa_get_pra_credential
zpa_get_pra_portal
zpa_get_provisioning_key
zpa_get_segment_group
zpa_get_server_group
zpa_get_service_edge
zpa_get_service_edge_group
zpa_get_timeout_policy_rule
zpa_list_access_policy_rules
zpa_list_app_connector_groups
zpa_list_app_connectors
zpa_list_app_protection_rules
zpa_list_application_segments
zpa_list_application_segments_ba
zpa_list_application_segments_pra
zpa_list_application_servers
zpa_list_ba_certificates
zpa_list_forwarding_policy_rules
zpa_list_isolation_policy_rules
zpa_list_lss_client_types
zpa_list_lss_configs
zpa_list_lss_log_types
zpa_list_lss_status_codes
zpa_list_pra_credentials
zpa_list_pra_portals
zpa_list_provisioning_keys
zpa_list_segment_groups
zpa_list_server_groups
zpa_list_service_edge_groups
zpa_list_service_edges
zpa_list_timeout_policy_rules
zpa_update_access_policy_rule
zpa_update_app_connector
zpa_update_app_connector_group
zpa_update_app_protection_rule
zpa_update_application_segment
zpa_update_application_segment_ba
zpa_update_application_segment_pra
zpa_update_application_server
zpa_update_forwarding_policy_rule
zpa_update_isolation_policy_rule
zpa_update_pra_credential
zpa_update_pra_portal
zpa_update_provisioning_key
zpa_update_segment_group
zpa_update_server_group
zpa_update_service_edge
zpa_update_service_edge_group
zpa_update_timeout_policy_rule
zdx_delete_analysis
zdx_delete_deeptrace
zdx_get_alert
zdx_get_analysis
zdx_get_application
zdx_get_application_metric
zdx_get_application_score_trend
zdx_get_application_user
zdx_get_deeptrace_cloudpath
zdx_get_deeptrace_cloudpath_metrics
zdx_get_deeptrace_events
zdx_get_deeptrace_health_metrics
zdx_get_deeptrace_webprobe_metrics
zdx_get_device
zdx_get_device_deep_trace
zdx_get_software_details
zdx_get_web_probes
zdx_list_alert_affected_devices
zdx_list_alerts
zdx_list_application_users
zdx_list_applications
zdx_list_cloudpath_probes
zdx_list_deeptrace_top_processes
zdx_list_departments
zdx_list_device_deep_traces
zdx_list_devices
zdx_list_historical_alerts
zdx_list_locations
zdx_list_software
zdx_start_analysis
zdx_start_deeptrace
zcc_get_device_otp
zcc_list_devices
zcc_list_forwarding_profiles
zcc_list_trusted_networks
ztw_create_ip_destination_group
ztw_create_ip_group
ztw_create_ip_source_group
ztw_delete_ip_destination_group
ztw_delete_ip_group
ztw_delete_ip_source_group
ztw_get_discovery_settings
ztw_list_admins
ztw_list_ip_destination_groups
ztw_list_ip_destination_groups_lite
ztw_list_ip_groups
ztw_list_ip_groups_lite
ztw_list_ip_source_groups
ztw_list_ip_source_groups_lite
ztw_list_network_service_groups
ztw_list_network_services
ztw_list_public_account_details
ztw_list_public_cloud_info
ztw_list_roles
zid_get_group
zid_get_group_users
zid_get_group_users_by_name
zid_get_user
zid_get_user_groups
zid_get_user_groups_by_name
zid_list_groups
zid_list_users
zid_search_groups
zid_search_users
zeasm_get_finding_details
zeasm_get_finding_evidence
zeasm_get_finding_scan_output
zeasm_get_lookalike_domain
zeasm_list_findings
zeasm_list_lookalike_domains
zeasm_list_organizations
zins_get_casb_app_report
zins_get_cyber_incidents
zins_get_cyber_incidents_by_location
zins_get_cyber_incidents_by_threat_and_app
zins_get_cyber_incidents_daily
zins_get_firewall_by_action
zins_get_firewall_by_location
zins_get_firewall_network_services
zins_get_iot_device_stats
zins_get_shadow_it_apps
zins_get_shadow_it_summary
zins_get_threat_class
zins_get_threat_super_categories
zins_get_web_protocols
zins_get_web_traffic_by_location
zins_get_web_traffic_no_grouping
zms_get_agent_connection_status_statistics
zms_get_agent_group_totp_secrets
zms_get_agent_version_statistics
zms_get_metadata
zms_get_nonce
zms_get_resource_group_members
zms_get_resource_group_protection_status
zms_get_resource_protection_status
zms_list_agent_groups
zms_list_agents
zms_list_app_catalog
zms_list_app_zones
zms_list_default_policy_rules
zms_list_nonces
zms_list_policy_rules
zms_list_resource_groups
zms_list_resources
zms_list_tag_keys
zms_list_tag_namespaces
zms_list_tag_values

Want a live walkthrough of this connector?

PromptArmor tracks connector risk across Claude, Codex, Copilot, and other MCP-enabled platforms. Book a demo to see the live connector risk dashboard for your environment.

Book a demo