Create ZPA client forwarding policy rules that control how traffic is routed from the Zscaler Client Connector. Supports actions: BYPASS (direct internet), INTERCEPT (route through ZPA), INTERCEPT_ACCESSIBLE (route only if reachable). Conditions support APP, APP_GROUP, SAML, SCIM, SCIM_GROUP, PLATFORM, COUNTRY_CODE, POSTURE, TRUSTED_NETWORK, and CLIENT_TYPE.
Install
npx skills add zscaler/zscaler-mcp-server --skill zpa-create-forwarding-policy-rulenpx skills add zscaler/zscaler-mcp-server --skill zpa-create-forwarding-policy-rule -a claude-code -gnpx skills add zscaler/zscaler-mcp-server --skill zpa-create-forwarding-policy-rule -a codex -ggemini skills install https://github.com/zscaler/zscaler-mcp-server.git --path skills/zpa/create-forwarding-policy-rulegh skill install zscaler/zscaler-mcp-server zpa-create-forwarding-policy-rulegit clone --depth 1 https://github.com/zscaler/zscaler-mcp-server /tmp/zscaler__zscaler-mcp-server
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/zscaler__zscaler-mcp-server/skills/zpa/create-forwarding-policy-rule ~/.claude/skills/zpa-create-forwarding-policy-rule # Claude Code
cp -R /tmp/zscaler__zscaler-mcp-server/skills/zpa/create-forwarding-policy-rule ~/.agents/skills/zpa-create-forwarding-policy-rule # Codex, Cursor, Gemini CLI, Copilot, OpenCode