MCP server for managing Netskope Zero-Trust Network Access (NPA) through LLMs (Model Context Protocol).
https://github.com/johnneerdael/netskope-mcpStop wrestling with complex Netskope management interfaces when you need to quickly check publisher status, update private app configurations, or troubleshoot user access issues. This MCP server brings your entire Netskope NPA infrastructure into conversational reach.
Managing Zero Trust Network Access shouldn't require remembering dozens of API endpoints or clicking through multiple admin consoles. When a user reports they can't access a private application, you need answers fast – not a 10-minute navigation exercise through the Netskope portal.
This MCP server gives you direct conversational access to your entire Netskope NPA stack: publishers, private apps, policies, upgrade profiles, and local brokers. Ask natural questions, get immediate insights, and make changes without context switching.
Publisher Management: Check status across all publishers, monitor upgrade progress, generate registration tokens, and manage bulk operations. "Show me all publishers with pending upgrades" becomes a simple question instead of a dashboard hunt.
Private Application Control: Create, update, and manage private apps with full configuration support. Modify protocols, security settings, and publisher assignments through conversation rather than form-filling.
Policy Administration: List, create, and update Zero Trust policies with complex conditions. Review rule priorities and troubleshoot access decisions without digging through policy trees.
Upgrade Orchestration: Manage upgrade profiles and schedules across your publisher fleet. Create maintenance windows, track upgrade progress, and handle bulk operations efficiently.
Local Broker Operations: Deploy and manage local brokers for on-premises ZTNA scenarios. Handle registration, configuration, and high-availability setups through natural commands.
Incident Response: "Which publishers are handling the CRM app and what's their current status?" Get immediate answers during outages instead of manually correlating data across multiple screens.
Access Troubleshooting: "Show me the policy rules affecting user john.doe's access to the finance application." Trace access decisions quickly without navigating complex policy hierarchies.
Deployment Automation: "Create a new private app for the development API server with TCP 8080, assign it to the east-coast publishers, and enable clientless access." Deploy new applications through conversation.
Maintenance Planning: "List all publishers that need upgrades and their associated applications." Plan maintenance windows with complete visibility into impact.
Audit Preparation: "Show me all policy rules created in the last 30 days and their conditions." Generate audit reports through simple queries.
Configure once with your Netskope tenant URL and API key, then access everything through your preferred MCP client. Works seamlessly with Claude Desktop, Continue, or any MCP-compatible interface.
The server handles authentication, rate limiting, and error handling automatically. Your Netskope infrastructure becomes as accessible as having a conversation with a colleague who knows your entire network topology.
The author indicates this is still in active development with ongoing work on all 50+ tools. Perfect for development environments and testing, but verify functionality thoroughly before production deployment. The comprehensive API coverage makes this incredibly valuable even in its current state.
Quick Start: Install via npm (@johnneerdael/netskope-mcp), configure your environment variables, and add to your MCP client configuration. Within minutes, your entire Netskope NPA infrastructure becomes conversationally accessible.
Transform how you manage Zero Trust infrastructure – from clicking through admin portals to simply asking questions and getting things done.