SonarQube MCP Server
by
Enables AI assistants to retrieve SonarQube code quality metrics, issues, security hotspots, and analysis results through the Model Context Protocol.
SonarQube MCP Server Overview
What is SonarQube MCP Server about?
Provides AI assistants with programmatic access to SonarQube (or SonarCloud) data, including metrics, issues, quality gates, security hotspots, source code views, and system health, all via the Model Context Protocol.
How to use SonarQube MCP Server?
- Install the server with npx (recommended) or Docker.
- Configure required environment variables – at minimum
SONARQUBE_URLandSONARQUBE_TOKEN; addSONARQUBE_ORGANIZATIONfor SonarCloud. - Register the server in Claude Desktop (or any MCP client) under
mcpServers. - Issue MCP commands such as
sonarqube.projects,sonarqube.issues,sonarqube.quality_gate_status, etc., to retrieve or manage data.
Key features of SonarQube MCP Server
- Retrieve project lists, metrics, and historical measures.
- Search and filter issues with full support for severity, type, status, assignee, tags, security standards (CWE, OWASP, SANS), and clean‑code attributes.
- Access security hotspots, update their status, and add comments.
- Query quality gate conditions and status per project, branch, or pull request.
- View source code with issues highlighted and obtain SCM blame information.
- System health and status endpoints.
- Bulk issue operations (mark false‑positive or won’t‑fix) with optional elicitation prompts.
- Supports both stdio transport (default for Claude Desktop) and HTTP transport for custom integrations.
- Extensive logging configuration and Docker images for production deployments.
Use cases of SonarQube MCP Server
- Automated code quality dashboards for AI assistants that summarize project health.
- Security audit assistants that locate critical vulnerabilities and suggest remediation steps.
- Sprint planning bots that list open issues per assignee, severity, or component.
- Pull‑request reviewers that fetch branch‑specific issues and hotspots.
- Continuous monitoring tools that poll quality gate status and alert on failures.
- Custom developer assistants that can comment on or assign issues directly from chat.
FAQ from the SonarQube MCP Server
Q: Can I use this with SonarCloud?
A: Yes. Set SONARQUBE_URL to https://sonarcloud.io and provide SONARQUBE_ORGANIZATION along with a token.
Q: What permissions does the token need?
A: The token must have at least Execute Analysis and Browse permissions for the projects you query. Admin permissions are required for tools like projects that list all projects.
Q: How do I filter issues by multiple criteria?
A: Use the issues tool and combine parameters such as severities, statuses, tags, component_keys, branch, pull_request, etc.
Q: Is there a way to run the server as a web service?
A: Yes. Set MCP_TRANSPORT_TYPE=http and optionally configure MCP_HTTP_PORT, CORS, and DNS rebinding protection.
Q: Where can I see detailed error messages?
A: Enable file logging with LOG_FILE and set LOG_LEVEL=DEBUG. Logs are written to the specified file, keeping stdio clean for MCP communication.
SonarQube MCP Server's README
This project is no longer maintained. Please refer to the official version at sonarqube-mcp-server.
SonarQube MCP Server Reviews
Login Required
Please log in to share your review and rating for this MCP.
Similar MCP Servers like SonarQube MCP Server
Explore related MCPs that share similar capabilities and solve comparable challenges
Git
Officialby modelcontextprotocol
A Model Context Protocol server for Git repository interaction and automation.
Zed
OfficialClientby zed-industries
A high‑performance, multiplayer code editor designed for speed and collaboration.
Everything
Officialby modelcontextprotocol
Model Context Protocol Servers
Time
Officialby modelcontextprotocol
A Model Context Protocol server that provides time and timezone conversion capabilities.
Cline
OfficialClientby cline
An autonomous coding assistant that can create and edit files, execute terminal commands, and interact with a browser directly from your IDE, operating step‑by‑step with explicit user permission.
Context7 MCP
Officialby upstash
Provides up-to-date, version‑specific library documentation and code examples directly inside LLM prompts, eliminating outdated information and hallucinated APIs.
Daytona
by daytonaio
Provides a secure, elastic infrastructure that creates isolated sandboxes for running AI‑generated code with sub‑90 ms startup, unlimited persistence, and OCI/Docker compatibility.
Continue
OfficialClientby continuedev
Enables faster shipping of code by integrating continuous AI agents across IDEs, terminals, and CI pipelines, offering chat, edit, autocomplete, and customizable agent workflows.
GitHub MCP Server
by github
Connects AI tools directly to GitHub, enabling natural‑language interactions for repository browsing, issue and pull‑request management, CI/CD monitoring, code‑security analysis, and team collaboration.