Zscaler Zero Trust Exchange MCP Server

zscaler-mcp-server is a Model Context Protocol (MCP) server that connects AI agents with the Zscaler Zero Trust Exchange platform. By default, the server operates in read-only mode for security, requiring explicit opt-in to enable write operations. It runs locally over stdio via the published package.

People connecting this server to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 46 · #37 OF 848 MAINTAINED OTHER · VERIFIED 2026-08-25

MIT · Python servers · how we verify → /methodology

01 · Install Zscaler Zero Trust Exchange

before you install - you'll need

Set ZSCALER_MCP_WRITE_ENABLED, ZSCALER_MCP_WRITE_TOOLS, ZSCALER_MCP_TOOLSETS, ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER, ZSCALER_MCP_TLS_CERTFILE, ZSCALER_MCP_TLS_KEYFILE, ZSCALER_MCP_TLS_KEYFILE_PASSWORD, ZSCALER_MCP_TLS_CA_CERTS, ZSCALER_MCP_AUTH_ENABLED, ZSCALER_MCP_AUTH_MODE, ZSCALER_MCP_AUTH_API_KEY before connecting. ZSCALER_MCP_ALLOWED_SOURCE_IPS is optional or environment-specific per the README.

Claude Code

claude mcp add zscaler-zscaler-mcp-server -- uvx zscaler-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "zscaler-zscaler-mcp-server": {
      "command": "uvx",
      "args": [
        "zscaler-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

pypi package zscaler-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.zscaler is GitHub-verified and matches the repo owner

03 · What Zscaler Zero Trust Exchange can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 1 documented tool, including query.

The 1 tools it gives your agent

Extracted from the project's README - what Zscaler Zero Trust Exchange lets an agent do.

query: - every list tool accepts an optional JMESPath

Limitations (from the README)

[!WARNING] 🔒 READ-ONLY BY DEFAULT: For security, this MCP server operates in read-only mode by default. Only list_ and get_ operations are available. To enable tools that can CREATE, UPDATE, or DELETE Zscaler resources, you must explicitly enable write mode using the --enable-write-tools flag or by setting ZSCALER_MCP_WRITE_ENABLED=true. See the Security & Permissions section for details.

Latest releases

v0.15.4 · 2026-08-19

0.15.4 (2026-08-19) · audit and label all tools returning externally-authored content

v0.15.3 · 2026-08-14

0.15.3 (2026-08-14) · label sandbox detonation reports as untrusted content (#103) (eba1cf7), closes #88

v0.15.2 · 2026-08-13

0.15.2 (2026-08-13) · ZPA pagination across 16 list tools, entitlement prd mapping gaps, and tenant-scope error wording (#102) (db16f9e), closes #95 #96 #98 #96 #95 #98

04 · Who maintains Zscaler Zero Trust Exchange

Zscaler Zero Trust Exchange is maintained by zscaler. It's the only MCP server we track from this author; the repo dates to May 2025.

05 · Facts

repository: github.com/zscaler/zscaler-mcp-server
website: https://github.com/zscaler/zscaler-mcp-server
category: other - ranked #37 of 848 actively-maintained other servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-08-19)
registry: io.github.zscaler/zscaler-mcp-server (active, first published 2026-04-10 · 20 versions)
packages: pypi:zscaler-mcp · oci:docker.io/zscaler/zscaler-mcp-server:latest

06 · Zscaler Zero Trust Exchange FAQ

What is Zscaler Zero Trust Exchange?

Is Zscaler Zero Trust Exchange still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Zscaler Zero Trust Exchange?

Run `uvx zscaler-mcp`. The README documents 12 environment variables (ZSCALER_MCP_WRITE_ENABLED, ZSCALER_MCP_WRITE_TOOLS, ZSCALER_MCP_TOOLSETS…) to set first. Set ZSCALER_MCP_WRITE_ENABLED, ZSCALER_MCP_WRITE_TOOLS, ZSCALER_MCP_TOOLSETS, ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER, ZSCALER_MCP_TLS_CERTFILE, ZSCALER_MCP_TLS_KEYFILE, ZSCALER_MCP_TLS_KEYFILE_PASSWORD, ZSCALER_MCP_TLS_CA_CERTS, ZSCALER_MCP_AUTH_ENABLED, ZSCALER_MCP_AUTH_MODE, ZSCALER_MCP_AUTH_API_KEY before connecting. ZSCALER_MCP_ALLOWED_SOURCE_IPS is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Zscaler Zero Trust Exchange run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Zscaler Zero Trust Exchange

Alternatives to Zscaler Zero Trust Exchange

Maintained other servers if Zscaler Zero Trust Exchange isn't the fit.

More MCP servers to compare · VMware NSX · VMware Storage · Paper Format Agent · Periphery Code Audit · Escrow

More Python MCP servers · Progi · Local Keep · VMware AIops · VMware AVI · VMware Harden · see all