---
name: automateyournetwork/zscaler-zpa
source: https://app.decimal.ai/s/automateyournetwork-zscaler-zpa@1/SKILL.md
source_sha256: 6abc0a0a323c
---

# Zscaler Private Access (ZPA) Skill

Manage Zscaler Private Access applications, segments, policies, and connectors.

## Tools

| Tool | Description |
|------|-------------|
| `list_application_segments` | List all application segments |
| `get_application_segment` | Get details for an application segment |
| `list_segment_groups` | List segment groups |
| `get_segment_group` | Get segment group details |
| `list_access_policies` | List access policies |
| `get_access_policy` | Get access policy details |
| `list_app_connectors` | List application connectors |
| `get_app_connector` | Get connector details and health |
| `list_connector_groups` | List connector groups |
| `list_server_groups` | List server groups |
| `list_provisioning_keys` | List provisioning keys |
| `create_application_segment` | Create new application segment (write mode) |
| `update_application_segment` | Update application segment (write mode) |
| `delete_application_segment` | Delete application segment (write mode) |

## Example Queries

```
List all ZPA application segments

Show access policies for the finance application

What connectors are unhealthy?

List segment groups in production

Show server groups for data center applications
```

## Prerequisites

- `ZSCALER_CLIENT_ID` OneAPI client ID
- `ZSCALER_CLIENT_SECRET` OneAPI client secret
- `ZSCALER_CUSTOMER_ID` Customer/tenant ID
- `ZSCALER_VANITY_DOMAIN` Vanity domain
- `ZSCALER_MCP_SERVICES` must include `zpa`

## Server

This skill uses the `zscaler-mcp` server which connects to ZPA via OneAPI.