Zscaler
Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (attack surface), and Z-Insights (analytics). Create and manage policies, troubleshoot connectivity, audit security configurations, and investigate incidents across the full Zscaler ecosystem.
MCP server
Added to Claude Code when you install the plugin. You sign in to Zscaler the first time it is used.
- zscaler-mcp-serverLocal
uvx --env-file ${CLAUDE_PLUGIN_ROOT}/.env [email protected]
Commands (20)
Shortcuts you type in Claude Code.
- /app-healthAnalyze application health across the organization using ZDX scores and metrics.
- /audit-softwareAudit software inventory across devices using ZDX data for compliance and vulnerability assessment.
- /audit-sslAudit ZIA SSL inspection rules -- list rules by action (INSPECT, DO_NOT_INSPECT, DO_NOT_DECRYPT, BLOCK), identify bypasses, and assess risk.
- /check-accessCheck whether a user or group can access a specific URL via ZIA policies.
- /compare-locationsCompare digital experience across locations, departments, or geolocations using ZDX.
- /create-access-ruleCreate a ZPA access policy rule with v2 conditions for application access control.
- /create-forwarding-ruleCreate a ZPA client forwarding policy rule to bypass or intercept traffic.
- /create-server-groupCreate a ZPA server group with required app connector group dependency.
- /create-timeout-ruleCreate a ZPA timeout policy rule for session re-authentication and idle timeout.
- /diagnose-deeptraceRun a ZDX deep trace diagnostics session — start, analyze, or clean up deep traces for a user's device.
- /investigate-alertsInvestigate active and historical ZDX alerts to understand scope, root cause, and impact.
- /investigate-incidentInvestigate security incidents using Z-Insights analytics -- threats, firewall actions, shadow IT, and web traffic.
- /investigate-sandboxInvestigate ZIA Sandbox file analysis -- check sandbox reports, quota, SSL prerequisite, and diagnose file block/quarantine issues.
- /investigate-urlInvestigate where a URL or URL category is referenced across ZIA policy rules.
- /onboard-appEnd-to-end onboarding of a new application in ZPA with full dependency chain.
- /onboard-locationEnd-to-end onboarding of a new ZIA location with traffic forwarding dependencies.
- /review-attack-surfaceReview external attack surface using Zscaler EASM findings, exposed services, and lookalike domains.
- /troubleshoot-connectorTroubleshoot ZPA App Connector issues -- enrollment, connectivity, upgrades, and resource utilization.
- /troubleshoot-experienceTroubleshoot a user's digital experience using ZDX scores, metrics, and network path data.
- /troubleshoot-userCross-product troubleshooting of user connectivity across ZCC, ZDX, ZPA, and ZIA.
Install
Run in your terminal
claude plugin install zscaler@claude-plugins-officialClaude Code already includes the claude-plugins-official marketplace, so this installs directly. Start a new Claude Code session to use it.
Already in a Claude Code session?
Install
/plugin install zscaler@claude-plugins-officialPublished in Anthropic's claude-plugins-official marketplace (anthropics/claude-plugins-official).
Related plugins
- 1SSecurity GuidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.242kmarketplace installs
- 2
SemgrepSemgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.20kmarketplace installs
- 3CClaude SecurityDeep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.8.6kmarketplace installs
- 4
Sonatype GuideSonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.7.5kmarketplace installs
- 5
Aikido SecurityAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.7.3kmarketplace installs
- 6
SonarqubeAutomatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.6.4kmarketplace installs