feat(zscaler-zpa): new Zscaler Private Access integration

ZPA config API, 7 commands: list/get application segments, list servers, server groups, segment groups, access policy rules. OAuth2 client-credentials (signin) auth, stdlib-only. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-12 00:37:11 +02:00
parent 86e7f11227
commit 6de01f85bb
8 changed files with 545 additions and 0 deletions
@@ -0,0 +1,93 @@
+id: zscaler_zpa
+name: Zscaler Private Access
+version: 1.0.0
+description: "Zscaler Private Access (ZPA config API) — zero-trust inventory and policy visibility: list and read application segments, list servers, server groups and segment groups, and list access policy rules. OAuth2 client-credentials authentication; stdlib-only, no extra Python dependencies."
+changelog: "1.0.0 — Initial release: list/get application segments, list servers, server groups, segment groups, access policy rules."
+category: network
+
+# Per-instance configuration. Sign in with client_id + client_secret to obtain a
+# bearer token; customer_id scopes the config API.
+config_schema:
+  properties:
+    base_url:
+      type: string
+      description: "ZPA config API base URL"
+      default: "https://config.private.zscaler.com"
+    client_id:
+      type: string
+      description: "ZPA API client ID"
+    client_secret:
+      type: string
+      description: "ZPA API client secret"
+      x-soar-sensitive: true
+    customer_id:
+      type: string
+      description: "ZPA customer ID"
+  required:
+    - client_id
+    - client_secret
+    - customer_id
+
+commands:
+  - id: list_application_segments
+    name: zpa-list-application-segments
+    description: "List application segments."
+    risk: read
+    inputs_schema:
+      properties:
+        page: { type: number, description: "Page number (default 1)" }
+        page_size: { type: number, description: "Page size (default 20)" }
+      required: []
+    outputs_schema: { properties: {} }
+  - id: get_application_segment
+    name: zpa-get-application-segment
+    description: "Get a single application segment by ID."
+    risk: read
+    inputs_schema:
+      properties:
+        segment_id: { type: string, description: "Application segment ID" }
+      required: [segment_id]
+    outputs_schema: { properties: {} }
+  - id: list_servers
+    name: zpa-list-servers
+    description: "List application servers."
+    risk: read
+    inputs_schema:
+      properties:
+        page: { type: number, description: "Page number (default 1)" }
+        page_size: { type: number, description: "Page size (default 20)" }
+      required: []
+    outputs_schema: { properties: {} }
+  - id: list_server_groups
+    name: zpa-list-server-groups
+    description: "List server groups."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }
+  - id: list_segment_groups
+    name: zpa-list-segment-groups
+    description: "List segment groups."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }
+  - id: list_access_policies
+    name: zpa-list-access-policies
+    description: "List access policy rules."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }
+
+  - id: test_connection
+    name: zpa-test-connection
+    description: "Verify the sign-in and API access (used by the Test button)."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }