Zscaler MCP Server

List ZPA SAML attributes, optionally scoped to a named IdP (read-only).

List ZPA SCIM attributes for a named IdP, or fetch one by ID (read-only).

Fetch one ZPA SCIM group by ID, or list all groups under a named IdP (read-only).

List ZPA trusted networks, or look one up by ID or name (read-only).

Get the OTP bundle for a ZCC device (logout / exit / uninstall / disable OTPs). Read-only (GET, no tenant mutation) but the returned values ARE sensitive short-lived credentials — treat them like passwords.

List ZCC enrolled devices (read-only). Each row is the full device record — identity, OS, agent version, registration state, assigned `policy_name`, ownership, hardware, VPN/tunnel state, and the enrollment / keep-alive timestamps.

List ZCC forwarding profiles (by company).

List ZCC trusted networks (by company).

Get the logged-in Zscaler Cellular customer's profile and SIM totals. Read-only.

Get the full Zscaler Cellular record for one SIM by ICCID. Read-only.

Get one Zscaler Cellular SIM location group. Read-only.

List Zscaler Cellular anomaly policies. Read-only.

List the activity log for one Zscaler Cellular anomaly policy. Read-only.

List the ICCIDs that violated a Zscaler Cellular anomaly policy. Read-only.

Search Zscaler Cellular audit-log entries over a lookback window. Read-only.

List the Zscaler Cellular audit filter vocabulary. Read-only.

List the anomaly-policy violation events for one ICCID. Read-only.

Search Zscaler Cellular network/session events over a lookback window. Read-only.

List Zscaler Cellular configured regions with their operational status. Read-only.

List the Zscaler Cellular regions available/configured for the customer. Read-only.

List Zscaler Cellular SIM map points (dashboard lat/lng summary). Read-only.

List the Zscaler Cellular SIM status summary (total/used/active/inactive). Read-only.

List Zscaler Cellular SIM location groups. Read-only.

List Zscaler Cellular data usage grouped by country (top countries). Read-only.

List Zscaler Cellular data usage per day over the window. Read-only.

List Zscaler Cellular data usage grouped by SIM (top SIMs). Read-only.

Search the Zscaler Cellular SIM inventory with filters and pagination. Read-only (browses the inventory).

List the Zscaler Cellular SIM tags defined for the customer. Read-only.

Stop/delete a running ZDX score analysis (destructive write). Cannot be undone. Confirmation required — the first call returns a prompt, not a deletion. Gated by `--write-tools`.

Delete a ZDX deep-trace session (destructive write). Cannot be undone. Confirmation required — the first call returns a prompt, not a deletion. Gated by `--write-tools`.

Get one ZDX alert as a curated, agent-facing detail view. Read-only.

Get the status/result of a ZDX score analysis (full record). Read-only.

Get the ZDX score for one application, with its most-impacted regions. Read-only.

Get ZDX performance metrics for one application (time-series). Read-only.

Get the ZDX score trend (over time) for one application. Read-only.

Get one user's ZDX detail for an application (per-device breakdown). Read-only.

Get the cloud-path (hop-by-hop network path) captured during a ZDX deep trace (curated, nested JSON).

Get cloud-path metrics captured during a ZDX deep trace (curated, nested time-series JSON).

Get the events captured during a ZDX deep trace (curated, nested JSON with ISO timestamps).

Get device health metrics captured during a ZDX deep trace (curated, nested time-series JSON).