Skip to main content
Glama
zscaler

zscaler-mcp-server

Official
by zscaler

zcell_list_anomaly_policies

Read-only

List Zscaler Cellular anomaly policies.

Instructions

List Zscaler Cellular anomaly policies.

Read-only. Returns one row per policy (id, name, type, enabled state, run status, applied SIM location groups, violation count) over a days lookback window. Use the returned id with the anomaly-policy logs and violations tools.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
daysNo
pageNo
sizeNo
queryNoOptional JMESPath expression applied to the results after the API call, for client-side filtering and projection. Examples: "[?enabled==`true`]", "[*].{name: name, id: id}", "length(@)". Omit to get the full records. IMPORTANT: field names are the keys of the returned records, which are usually snake_case (`custom_category`) even where the Zscaler API documents camelCase (`customCategory`) — guessing the spelling yields an empty list that looks like a real answer. If you have not already seen a record from this tool, call it once without `query` and read the keys off the response.
policy_typeNo
Install Server

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reinforces the readOnlyHint annotation with 'Read-only' and details the return shape (one row per policy with the fields listed) and the lookback window behavior. While it echoes the annotation context, it adds value by naming exact output fields beyond the schema, which helps with chaining. It misses on noting pagination behavior (also missing from the schema), but the query params for page/size imply it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences and front-loads the purpose, then context, then chaining—a clear funnel structure. Every sentence adds value. It's arguably the ideal length for a list tool with rich annotations, as it reiterates the read-only nature and gives actionable details without bloat.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a list tool with an existing output schema (though minimal) and 5 parameters, the description covers the full lifecycle: input (`days`), output fields, and downstream consumption (`id` chaining). The only gap is a canned example showing `days=30` usage or common combinations, but the description already goes further than typical list tools by preemptively warning about the `query` parameter's gotchas. It confidently covers the 'model the agent's mental model' bar.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The `query` parameter description is exceptional—it goes beyond the schema with concrete JMESPath examples, warns about the snake_case/camelCase mismatch, and even provides a troubleshooting tip (call without `query` to see field names). The `days` lookback is documented in the description text. While `policy_type` lacks enum values, the schema provides a title and type, and the description's explicit warning for `query` more than compensates for this small gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb+resource ('List Zscaler Cellular anomaly policies') and clearly distinguishes this from sibling tools by enumerating the returned fields (id, name, type, enabled state, run status, applied SIM location groups, violation count) and referencing the sibling log and violations tools by name. It's immediately clear this lists policy summaries rather than logs or violations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context ('Use the returned `id` with the anomaly-policy logs and violations tools'), which serves as light chaining guidance and implicitly explains when to use this tool vs. relevant siblings. However, it doesn't explicitly state when NOT to use the tool or reference search/alternatives by exact naming beyond the high-level 'anomaly-policy logs and violations tools', which is a minor miss given the sibling list shows many similar tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/zscaler/zscaler-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server