Zscaler MCP Server
Zscaler Zero Trust Exchange platform interaction for AI agents and automated workflows.
Data last scanned today · Reviewed today
Overview
The Zscaler MCP Server provides a bridge between AI agents and the Zscaler Zero Trust Exchange platform. It allows users to interact with Zscaler infrastructure, with the server defaulting to a read-only configuration to restrict unauthorized changes.
Our verdict
This server carries a high-risk score of 38/100, primarily because its authentication methods and read-only mode claims have not yet been editorially reviewed. It is currently in public preview and should not be used in production environments, as noted by the maintainers.
- Zero direct dependencies reduce potential supply-chain vulnerabilities.
- Comes with established documentation on ReadTheDocs.
- Project shows consistent activity with recent commits.
- Not an official Zscaler-maintained project.
- Authentication mechanisms lack independent security review.
Tools
| Tool | Description | Risk |
|---|---|---|
| zia_activate_configuration | Activates the ZIA configuration. | medium |
| zia_get_activation_status | Retrieves the status of ZIA configuration activation. | low |
| zia_get_advanced_settings | Retrieves ZIA advanced settings. | low |
| zia_update_advanced_settings | Updates ZIA advanced settings. | medium |
| zia_get_atp_malware_inspection | Retrieves ATP malware inspection settings. | low |
| zia_get_atp_malware_policy | Retrieves the ATP malware policy. | low |
| zia_get_atp_malware_protocols | Retrieves ATP malware inspection protocols. | low |
| zia_get_malware_settings | Retrieves malware inspection settings. | low |
| zia_update_atp_malware_inspection | Updates ATP malware inspection settings. | medium |
| zia_update_atp_malware_policy | Updates the ATP malware policy. | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›Is the server capable of modifying Zscaler resources by default?
No, the server operates in read-only mode by default for security, allowing only list and get operations.
›How can I enable write operations such as creating or updating resources?
You must explicitly enable write mode by using the --enable-write-tools command-line flag or by setting the ZSCALER_MCP_WRITE_ENABLED environment variable to true.
›Are all 402 available tools loaded at once?
Most MCP clients use deferred tool loading and will search for relevant tools based on your specific prompt rather than loading all tools simultaneously.
›How can I reduce the number of tools the server exposes?
You can use additional command-line options to disable specific services, which fully removes their associated tools from the server.
›Can I use this server in a production environment?
No, the project is currently in public preview and the developers explicitly recommend avoiding production deployments until the stable 1.0 release.
Alternatives
Changelog
Badge
Maintain this server? Add the live badge to your README.