Zscaler agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Zscaler work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Zscaler

Connect Zscaler once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Zscaler skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing2 Zscaler tools

Use the Zscaler MCP Server safely

Guides an agent through the Zscaler MCP Server: confirming the tenant, respecting read-only defaults and the write allowlist, and asking for explicit approval before any change to live configuration.

Use it when

You are connecting Zscaler tools for the first time and want to know what is safe to run.
You want to add a new ZIA location or rule and need to confirm the tenant and approval steps first.
A Zscaler tool returned a permission error and you want to understand why.

Tools it uses

zia_activate_configuration
zia_add_urls_to_category

Example

List my ZIA user groups in the production tenant, and do not change anything yet.

Read-only check against the production tenant. I found 14 user groups, and 3 of them show no members. I have not created, changed or activated anything. Before I draft any cleanup, please confirm this is the production tenant you intend.

Use in RevampKeyRead the full skill →

Asks before writing4 Zscaler tools

Review ZIA DLP and URL category coverage

Checks ZIA DLP dictionaries, engines, URL categories and ATP malicious URL lists for gaps, dead entries and conflicts, then drafts changes for your approval rather than applying them.

Use it when

Your data-protection rules may not cover a sensitive category
A domain is both allowed and blocked and you want to know which wins
You are preparing a URL clean-up and want the changes reviewed first

Tools it uses

get_zia_dlp_dictionaries
get_zia_dlp_engines
zia_add_urls_to_category
zia_activate_configuration

Example

Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.

I checked 12 DLP dictionaries across 4 engines in the test tenant. Two dictionaries feed no engine and one engine covers no card-number pattern. I also found one domain both allowed in a custom category and blocked in the ATP list. Nothing has been changed; the three draft changes are waiting for your explicit yes.

Use in RevampKeyRead the full skill →

Asks before writing9 Zscaler tools

Plan ZIA locations, IP groups and GRE tunnels with AI

Plans a ZIA site or rollout: checks existing locations, IP groups, network services and tunnels for overlaps, drafts each object, and creates nothing until you approve the exact list.

Use it when

Adding a new office or site to ZIA with its own egress range
Building source and destination IP groups for a data centre move
Setting up a GRE tunnel and the location that attaches to it

Tools it uses

get_zia_user_groups
get_zia_user_departments
zia_create_ip_source_group
zia_create_ip_destination_group
zia_create_network_service
zia_create_network_svc_group
zia_create_location
zia_create_gre_tunnel
zia_activate_configuration

Example

Plan the ZIA setup for our new Leeds office: a location, two IP source groups for the office subnets, and a GRE tunnel to the new peer. Check for conflicts first and don't create anything until I approve.

I checked the tenant inventory first. The Leeds subnets 10.42.0.0/24 and 10.42.1.0/24 are not in any existing group, but 10.42.0.0/24 overlaps an old Leeds-Temp group. My plan is 4 objects: 2 source groups, 1 location and 1 GRE tunnel, reusing Leeds-Temp rather than duplicating it. Tell me which to approve, and confirm the tunnel peer address with the network team before I create the tunnel.

Use in RevampKeyRead the full skill →

Read-only6 Zscaler tools

Audit ZIA rules with the Zscaler MCP Server

Reviews your Zscaler Internet Access firewall, DNS, IPS and cloud app control rules, labels and groups to find shadowed, duplicated or unowned policy. It is read-only and proposes changes without applying them.

Use it when

Before a quarterly policy review, to find rules that never fire
After several teams have added rules, to spot overlaps and conflicts
When a new admin needs to understand which rules are live and which are dead weight

Tools it uses

zia_activate_configuration
get_zia_user_groups
get_zia_user_departments
get_zia_users
get_zia_dlp_dictionaries
get_zia_dlp_engines

Example

Audit my ZIA cloud firewall rules for shadowed or unlabelled rules and tell me which groups nothing uses.

Tenant ZIA-prod, cloud firewall rules, complete. 58 rules reviewed. High: rule 'Allow Dev Any' at order 12 sits above a block on the finance subnet, so the block never fires. Medium: 9 rules have no label. Low: 3 duplicate groups with identical members. Nothing is changed; the proposed merge is waiting for your approval.

Use in RevampKeyRead the full skill →

Read-only3 Zscaler tools

Reconcile your ZIA user directory

Compares ZIA users, departments and groups with your intended directory to find orphaned accounts, empty groups and department mismatches. It reports findings only and asks before changing anything.

Use it when

You suspect stale or leaver accounts still exist in ZIA.
You want to check that each user sits in the right department and group.
You are preparing for an audit and need a directory mismatch report.

Tools it uses

get_zia_user_departments
get_zia_user_groups
get_zia_users

Example

Compare my ZIA users against this HR export and tell me who is orphaned, who has no group, and which groups are empty.

I reviewed 1,240 ZIA users across 9 pages, 14 departments and 37 groups. 23 users have no department, and 6 of them are absent from the HR export, so they are likely leavers. 4 groups have no members, including a pilot group from last year. I have not changed anything. Do you want a review list for the owners?

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Zscaler, updates them for you and removes them when you disconnect.

Download RevampKey

How Zscaler skills work

Connect Zscaler
The Zscaler MCP server gives the agent its tools.
Ask in plain words
“Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Zscaler skills

In RevampKey the skills install themselves when you connect Zscaler. In other tools each skill is one folder with a SKILL.md file, and you also need the Zscaler MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Zscaler. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.”
Download RevampKeyConnect Zscaler · 1 click
Get RevampKey to connect Zscaler
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Zscaler is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do curl -fsSL --create-dirs -o .claude/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Zscaler MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do
  curl -fsSL --create-dirs -o .claude/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.”

Into the shared .agents/skills folder

Connect the Zscaler MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do
  curl -fsSL --create-dirs -o .agents/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.”

Into the shared .agents/skills folder

Connect the Zscaler MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do
  curl -fsSL --create-dirs -o .agents/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.”

Into the shared .agents/skills folder

Connect the Zscaler MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do
  curl -fsSL --create-dirs -o .agents/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our ZIA DLP dictionaries and URL categories for gaps and conflicts, read-only, and draft any changes for my approval.”

RevampKey or copy the files?

In RevampKey

One click when you connect Zscaler
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Zscaler MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Zscaler skills FAQ

What is a Zscaler agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Zscaler skill describes one job, which Zscaler tools to use in which order, what to check first and when to stop and ask you.

Do the Zscaler skills change anything on their own?

2 of the 5 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Zscaler.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Zscaler; elsewhere you copy the folders into your project or skills directory.

Do I need the Zscaler MCP server too?

Yes. The skills tell the agent how to do the work; the Zscaler MCP server gives it the tools to do it. The Zscaler MCP setup guide covers every client.

Zscaler MCP server setup · This page as Markdown

Put Zscaler’s best workflows in your agent

Download RevampKey, connect Zscaler and ask your first question in about a minute.

Download RevampKey Connect Zscaler · 1 click

All 5 Zscaler skills

Use the Zscaler MCP Server safely

Use it when

Tools it uses

Review ZIA DLP and URL category coverage

Use it when

Tools it uses

Plan ZIA locations, IP groups and GRE tunnels with AI

Use it when

Tools it uses

Audit ZIA rules with the Zscaler MCP Server

Use it when

Tools it uses

Reconcile your ZIA user directory

Use it when

Tools it uses

Get all 5 without copying a file

How Zscaler skills work

How to install Zscaler skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Zscaler skills FAQ

Put Zscaler’s best workflows in your agent

Skills for related tools