# Zscaler Zpa

> Manage Zscaler Private Access applications, segments, policies, and connectors.

- Skill: `automateyournetwork/zscaler-zpa` (Agent Skill)
- Install (CLI): `npx skillmds@latest add automateyournetwork/zscaler-zpa`
- Raw SKILL.md: https://api.skillmd.com/api/skills/automateyournetwork/zscaler-zpa/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: Apache-2.0
- Author: automateyournetwork (https://skillmd.com/u/automateyournetwork)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/automateyournetwork/zscaler-zpa

---


# Zscaler Private Access (ZPA) Skill

Manage Zscaler Private Access applications, segments, policies, and connectors.

## Tools

| Tool | Description |
|------|-------------|
| `list_application_segments` | List all application segments |
| `get_application_segment` | Get details for an application segment |
| `list_segment_groups` | List segment groups |
| `get_segment_group` | Get segment group details |
| `list_access_policies` | List access policies |
| `get_access_policy` | Get access policy details |
| `list_app_connectors` | List application connectors |
| `get_app_connector` | Get connector details and health |
| `list_connector_groups` | List connector groups |
| `list_server_groups` | List server groups |
| `list_provisioning_keys` | List provisioning keys |
| `create_application_segment` | Create new application segment (write mode) |
| `update_application_segment` | Update application segment (write mode) |
| `delete_application_segment` | Delete application segment (write mode) |

## Example Queries

```
List all ZPA application segments

Show access policies for the finance application

What connectors are unhealthy?

List segment groups in production

Show server groups for data center applications
```

## Prerequisites

- `ZSCALER_CLIENT_ID` OneAPI client ID
- `ZSCALER_CLIENT_SECRET` OneAPI client secret
- `ZSCALER_CUSTOMER_ID` Customer/tenant ID
- `ZSCALER_VANITY_DOMAIN` Vanity domain
- `ZSCALER_MCP_SERVICES` must include `zpa`

## Server

This skill uses the `zscaler-mcp` server which connects to ZPA via OneAPI.