zscaler-mcp-server
Connects AI agents to the Zscaler Zero Trust Exchange platform via the Model Context Protocol, enabling read-only operations by default with optional write capabilities.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
zscaler
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
ZSCALER_MCP_REQUEST_STATE_KEYSShared key ring for the SEP-2322 requestState. JSON array or comma-separated; each key ≥32 bytes (python -c "import secrets; print(secrets.token_hex(32))"). Required for multi-replica HTTP deployments with write tools enabled — unset uses a per-process key, so a confirmation issued by one replica cannot be validated by another. First key seals, all unseal (rotate [old,new] → [new,old] → [new]).ZSCALER_MCP_TLS_CERTFILEPath to TLS certificate file (PEM format) for HTTPS.ZSCALER_MCP_TLS_KEYFILEPath to TLS private key file (PEM format) for HTTPS.ZSCALER_MCP_TLS_KEYFILE_PASSWORDPassword for encrypted TLS private key (if applicable).ZSCALER_MCP_TLS_CA_CERTSPath to CA certificate bundle for mutual TLS or custom CA chains.ZSCALER_MCP_ALLOW_HTTPHTTPS is required by default for non-localhost deployments. The server will refuse to start on a non-localhost interface without TLS certificates unless you explicitly set =true.ZSCALER_MCP_DOTENV_PATHZSCALER_CLIENT_IDLayer 2 (Zscaler API Auth): Controlled by , ZSCALER_CLIENT_SECRET, etc. — authenticates the server to Zscaler APIsZSCALER_CLIENT_SECRETLayer 2 (Zscaler API Auth): Controlled by ZSCALER_CLIENT_ID, , etc. — authenticates the server to Zscaler APIsZSCALER_MCP_TRANSPORTTransport method - stdio, sse, or streamable-http (default: stdio)ZSCALER_MCP_HOSTHost for HTTP transports (default: 127.0.0.1)ZSCALER_MCP_PORTPort for HTTP transports (default: 8000)ZSCALER_MCP_SERVICESComma-separated list of services to enable (default: all services)ZSCALER_MCP_DISABLED_SERVICESComma-separated list of services to exclude (e.g., zcc,zdx). Takes precedence over ZSCALER_MCP_SERVICES.ZSCALER_MCP_TOOLSETS10. Environment Variable Control: ZSCALER_MCP_WRITE_ENABLED, ZSCALER_MCP_WRITE_TOOLS, , ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER, and the disable lists can all be managed centrally without code changes.ZSCALER_MCP_DISABLED_TOOLSETSZSCALER_MCP_WRITE_ENABLED10. Environment Variable Control: , ZSCALER_MCP_WRITE_TOOLS, ZSCALER_MCP_TOOLSETS, ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER, and the disable lists can all be managed centrally without code changes.ZSCALER_MCP_WRITE_TOOLS10. Environment Variable Control: ZSCALER_MCP_WRITE_ENABLED, , ZSCALER_MCP_TOOLSETS, ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER, and the disable lists can all be managed centrally without code changes.ZSCALER_MCP_DISABLED_TOOLSComma-separated list of tools to exclude. Supports wildcards (e.g., zcc_,zia_list_devices). Takes precedence over ZSCALER_MCP_TOOLS.ZSCALER_MCP_DISABLE_ENTITLEMENT_FILTER10. Environment Variable Control: ZSCALER_MCP_WRITE_ENABLED, ZSCALER_MCP_WRITE_TOOLS, ZSCALER_MCP_TOOLSETS, , and the disable lists can all be managed centrally without code changes.ZSCALER_MCP_LOG_TOOL_CALLS12. Audit Logging: When --log-tool-calls / =true is set, every tool invocation is logged with its arguments (sensitive values redacted), duration, and a result summary.ZSCALER_MCP_USER_AGENT_COMMENTAdditional information to include in User-Agent comment sectionZSCALER_MCP_PID_FILEZSCALER_MCP_DEBUGEnable debug logging - true or false (default: false)NO_COLORCOLORTERMTERMAWS_PROFILEAWS_REGIONTOPOLOGYZSCALER_CUSTOMER_IDYour Zscaler customer IDTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
348/348 tools missing one or more hints — zpa_list_application_servers (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); zpa_get_application_server (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); zpa_create_application_server (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +345 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Secrets not logged
4 secret values sent to print
Redact or omit secret values from log output.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/zscaler/zscaler-mcp-server)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check