SonarQube MCP Server
Officialby SonarSource
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| STORAGE_PATH | No | Absolute path to a writable directory where the server stores files. Automatically provided when using the Docker image; required when running from a JAR. | |
| SONARQUBE_ORG | No | Your SonarQube Cloud organization key. Required when connecting to SonarQube Cloud. | |
| SONARQUBE_URL | No | The SonarQube Server URL. Required when connecting to SonarQube Server. For SonarQube Cloud, this is optional and defaults to 'https://sonarcloud.io' (use 'https://sonarqube.us' for Cloud US). | |
| SONARQUBE_TOKEN | No | Your SonarQube token. Required for both SonarQube Cloud and SonarQube Server. For SonarQube Cloud, use a user token; for SonarQube Server, use a USER token. | |
| SONARQUBE_IDE_PORT | No | Optional port number between 64120 and 64130 used to connect with SonarQube for IDE. | |
| SONARQUBE_TOOLSETS | No | Comma-separated list of toolsets to enable. If not set, default important toolsets are enabled. Example: 'analysis,issues,quality-gates'. | |
| SONARQUBE_HTTP_HOST | No | Host to bind for HTTP/HTTPS transport. Default: '127.0.0.1'. | 127.0.0.1 |
| SONARQUBE_HTTP_PORT | No | Port number for HTTP/HTTPS transport. Default: '8080'. | 8080 |
| SONARQUBE_READ_ONLY | No | Set to 'true' to enable read-only mode, which disables all write operations. Default: 'false'. | false |
| SONARQUBE_TRANSPORT | No | Transport mode. Leave unset for stdio (default), or set to 'http' or 'https' for Streamable HTTP transport. | |
| SONARQUBE_PROJECT_KEY | No | Optional default project key. When set, all tools that require a project key use this value automatically. | |
| SONARQUBE_DEBUG_ENABLED | No | Set to 'true' to enable debug logging. Default: 'false'. | false |
| SONARQUBE_MCP_IN_CONTAINER | No | Set to 'true' when running inside a container (not automatically set by the Docker image). Default: 'false'. | false |
| SONARQUBE_HTTP_ALLOWED_ORIGINS | No | Comma-separated browser origins allowed for CORS in HTTP/HTTPS transport. | |
| SONARQUBE_LOG_TO_FILE_DISABLED | No | Set to 'true' to disable writing logs to disk. Default: 'false'. | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/SonarSource/sonarqube-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server