Command
Cross-product troubleshooting of user connectivity across ZCC, ZDX, ZPA, and ZIA.
Command
Cross-product troubleshooting of user connectivity across ZCC, ZDX, ZPA, and ZIA.
Cursor rule
Zscaler APIs have intentional cross-service data overlap. Disabling a service does not remove overlapping tools from other services.
Cursor rule
Write operations are disabled by default and require explicit enablement. Delete operations use HMAC confirmation tokens.
Cursor rule
ZDX is a read-only monitoring service. The since parameter is in hours, not timestamps.
Cursor rule
ZIA requires explicit activation after any create, update, or delete operation. Forgetting this is the number one source of issues.
Cursor rule
ZMS uses GraphQL and is read-only. Every query requires ZSCALERCUSTOMERID and uses specific pagination patterns.
Cursor rule
ZPA application onboarding requires resources to be created in a specific dependency order. Skipping dependencies causes cryptic 400 errors.
Cursor rule
Zscaler MCP tool naming, discovery, and usage conventions for the Zero Trust Exchange.
Skill Claude CodeCodex
Cross-product troubleshooting of user connectivity issues spanning ZPA, ZIA, ZDX, and ZCC. Investigates end-to-end: (1) ZCC client status and enrollment, (2) ZDX digital experience scores and metrics, (3) ZPA application segment and access policy configuration, (4) ZIA URL filtering and SSL inspection policies. Use…
Skill Claude CodeCodex
Review the organization's external attack surface using Zscaler EASM. Lists organizations, retrieves findings (exposed services, vulnerabilities, misconfigurations), checks for lookalike domains, and generates a prioritized risk summary. Use when a security team asks: 'What is our external exposure?', 'Are there any…
Skill Claude CodeCodex
Generate a One-Time Logout Password (OTP) for a Zscaler Client Connector (ZCC) user. Walks the admin from a user identifier (email or device name) through device lookup → confirmation → OTP retrieval → secure delivery, surfacing logoutotp from the ZCC OTP bundle. Use when an admin needs to remotely sign a specific…
Skill Claude CodeCodex
Analyze the health of one or more monitored applications across the organization using ZDX scores, metrics, and affected-user breakdowns. Identifies which applications are degraded, which metrics are the bottleneck, and which users are most impacted. Aligned with ZDX Copilot analytics use cases. Use when an…
Skill Claude CodeCodex
Audit the software inventory across devices in the organization using ZDX data. Lists installed software, filters by location, department, or user, and drills into specific software version details. Use for compliance audits, security vulnerability assessments, or identifying outdated software. Use when an…
Skill Claude CodeCodex
Compare digital experience across locations, departments, and geolocations using ZDX data. Identifies which offices or regions have the best and worst experience for specific applications, detects location-specific issues, and provides optimization recommendations. Aligned with ZDX Copilot analytics and optimization…
Skill Claude CodeCodex
Run a ZDX deep trace diagnostics session to investigate network and device issues. Start new sessions, analyze web probe metrics, cloud path topology, device health, top processes, and event timelines to pinpoint root cause. Use when an administrator asks: 'Start a deep trace for this user', 'Analyze the diagnostics…
Skill Claude CodeCodex
Investigate active and historical ZDX alerts to understand their scope, root cause, and impact. Drills into affected devices, correlates with application metrics, and identifies patterns across time. Aligned with ZDX Copilot troubleshooting use cases. Use when an administrator asks: 'Show me ongoing alerts', 'What…
Skill Claude CodeCodex
Diagnose a multi-application outage scoped to one location by correlating ZDX alerts, affected devices, and shared cloud-path hops. Identifies the devices affected at a specific office, compares the per-application network path across multiple SaaS apps to surface the common network bottleneck, and produces an…
Skill Claude CodeCodex
Troubleshoot a user's digital experience using ZDX data. Investigates device health, application scores, network path metrics, and active alerts to identify performance bottlenecks. Use when an administrator reports: 'User says app is slow', 'Check user experience', or 'Why is the application score low?'.
Skill Claude CodeCodex
Audit ZIA SSL inspection rules to identify which applications, URL categories, users, or groups are subject to INSPECT, DONOTINSPECT, or DONOTDECRYPT actions. This skill focuses exclusively on SSL inspection rules and their configuration. Use when a security administrator asks: 'What SSL rules are in decryption…
Skill Claude CodeCodex
Determine whether a specific user or group is allowed to access a given URL by evaluating all applicable ZIA policies in order. Performs URL category lookup, then evaluates URL filtering rules, SSL inspection rules, DLP rules, and cloud firewall rules in priority order to produce a definitive access verdict. Use when…
Skill Claude CodeCodex
Create ZIA Cloud App Control rules that enforce granular, action-level decisions on cloud applications (Dropbox, OneDrive, Google Drive, ChatGPT, GitHub, YouTube, Slack, etc.). Cloud App Control is action-level, not block/allow at the connection layer — actions are things like ALLOWFILESHAREUPLOAD, BLOCKWEBMAILATTACH…
Skill Claude CodeCodex
Create a ZIA Cloud Firewall Filtering rule that controls network traffic by source/destination IP, country, network application, network service, device trust level, user/group/department, location, and optional time-of-day schedule (Time Interval). Supported actions: ALLOW, BLOCKDROP, BLOCKRESET, BLOCKICMP…
Skill Claude CodeCodex
Create a ZIA SSL Inspection rule that controls how Zscaler handles SSL/TLS encrypted traffic — BLOCK (drop the SSL connection), DECRYPT (decrypt and inspect), or DONOTDECRYPT (pass through without decryption). Scopes the rule by cloud applications, URL categories, users, groups, departments, locations, device trust…
Skill Claude CodeCodex
Create a ZIA URL Filtering rule that controls user access to web content by URL category, protocol, request method, user agent, user/group/department, location, device trust level, and optional time-of-day schedule (Time Interval). Supported actions: ALLOW, BLOCK, CAUTION, ISOLATE. Use when an admin asks to 'create a…