A
licenseA
qualityD
maintenanceA Model Context Protocol (MCP) server that provides AI assistants with access to SonarQube code quality, security, and project analytics data.
7
38 npm
MIT
SonarQube MCP Server
by bhayanak
Provides access to code analysis and security insights from SonarSource products, enabling AI assistants to query project metrics, quality gate status, and detailed analysis results.
Allows AI assistants to interact with SonarCloud's code analysis platform to monitor project health, investigate security hotspots, and track code quality metrics over time.
Provides tools for accessing code quality and security analysis data from SonarQube instances, including project listing, issue searching (bugs, vulnerabilities, code smells), quality gate status checks, and retrieval of code metrics.
🛡️ SonarQube MCP Server
📦 Packages
This monorepo contains two packages:
Package | Description | Docs |
Standalone MCP server (npm, CLI, stdio) | ||
VS Code extension with built-in MCP server |
Related MCP server: sonarqube-mcp-py
🔧 12 Tools at a Glance
Tool | What it does |
| List projects with quality status |
| Project overview with metrics |
| Search bugs, vulns & code smells |
| Full issue details |
| Quality gate status & conditions |
| Security hotspots needing review |
| Hotspot details & remediation |
| Code quality metrics |
| Metric trends over time |
| Rule details & guidance |
| Search rules by language/type |
| File tree with metrics |
🚀 Quick Start
Option 1 — VS Code Extension (Recommended)
Install SonarQube MCP from the VS Code Marketplace
Set
sonarqubeMcp.baseUrlandsonarqubeMcp.tokenin VS Code settingsThe MCP server appears automatically in VS Code's MCP panel — start/stop/restart from there
Option 2 — Standalone CLI
npm install -g sonarqube-mcp-server
export SONAR_MCP_BASE_URL="https://sonarcloud.io"
export SONAR_MCP_TOKEN="squ_your_token"
sonarqube-mcp-serverOption 3 — MCP Client Config (Claude Desktop, Cursor, etc.)
{
"mcpServers": {
"sonarqube": {
"command": "npx",
"args": ["sonarqube-mcp-server"],
"env": {
"SONAR_MCP_BASE_URL": "https://sonarcloud.io",
"SONAR_MCP_TOKEN": "squ_your_token"
}
}
}
}📄 License
MIT © bhayanak
This server cannot be deployed
Maintenance
ActivityInactive
ResponsivenessNo issues
Related MCP Connectors
Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools.
Connect AI assistants to your GitHub-hosted Obsidian vault to seamlessly access, search, and analy…
The Cortex MCP server provides read-only access to real-time engineering context from the Cortex developer portal, allowing AI coding assistants to answer natural language questions about your organization's catalog (microservices, libraries, domains, teams, infrastructure), scorecards (engineering standards and best practices), initiatives (goals and deadlines), and Engineering Intelligence metrics. It includes tools for querying documentation, tracking personal entities, and accessing AI-assisted insights across the entire Cortex ecosystem.
Related MCP Servers
- AlicenseCqualityDmaintenanceA Python MCP server for SonarQube, enabling AI agents to query projects, issues, quality gates, coverage, and security hotspots.13MIT
- FlicenseNot gradedqualityCmaintenanceMCP server that exposes SonarQube data as AI agent tools, enabling project discovery, quality gates, measures, issues, hotspots, rule explanations, source code, and raw API access.4-
- AlicenseAqualityDmaintenanceEnables Cursor AI to query SonarQube for pull request metrics, issues, file issues, and duplication reports directly, without manual data export.438 npmMIT