SonarQube MCP Server
Provides access to code analysis and security insights from SonarSource products, enabling AI assistants to query project metrics, quality gate status, and detailed analysis results.
Allows AI assistants to interact with SonarCloud's code analysis platform to monitor project health, investigate security hotspots, and track code quality metrics over time.
Provides tools for accessing code quality and security analysis data from SonarQube instances, including project listing, issue searching (bugs, vulnerabilities, code smells), quality gate status checks, and retrieval of code metrics.
π‘οΈ SonarQube MCP Server
π¦ Packages
This monorepo contains two packages:
Package | Description | Docs |
Standalone MCP server (npm, CLI, stdio) | ||
VS Code extension with built-in MCP server |
Related MCP server: SonarQube MCP Server
π§ 12 Tools at a Glance
Tool | What it does |
| List projects with quality status |
| Project overview with metrics |
| Search bugs, vulns & code smells |
| Full issue details |
| Quality gate status & conditions |
| Security hotspots needing review |
| Hotspot details & remediation |
| Code quality metrics |
| Metric trends over time |
| Rule details & guidance |
| Search rules by language/type |
| File tree with metrics |
π Quick Start
Option 1 β VS Code Extension (Recommended)
Install SonarQube MCP from the VS Code Marketplace
Set
sonarqubeMcp.baseUrlandsonarqubeMcp.tokenin VS Code settingsThe MCP server appears automatically in VS Code's MCP panel β start/stop/restart from there
β Extension docs
Option 2 β Standalone CLI
npm install -g sonarqube-mcp-server
export SONAR_MCP_BASE_URL="https://sonarcloud.io"
export SONAR_MCP_TOKEN="squ_your_token"
sonarqube-mcp-serverβ Server docs
Option 3 β MCP Client Config (Claude Desktop, Cursor, etc.)
{
"mcpServers": {
"sonarqube": {
"command": "npx",
"args": ["sonarqube-mcp-server"],
"env": {
"SONAR_MCP_BASE_URL": "https://sonarcloud.io",
"SONAR_MCP_TOKEN": "squ_your_token"
}
}
}
}π License
MIT Β© bhayanak
This server cannot be deployed
Maintenance
Related MCP Connectors
Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
AI-powered codebase analysis β call graphs, security, dead code, complexity. 150+ tools.
Connect AI assistants to your GitHub-hosted Obsidian vault to seamlessly access, search, and analyβ¦
The Cortex MCP server provides read-only access to real-time engineering context from the Cortex developer portal, allowing AI coding assistants to answer natural language questions about your organization's catalog (microservices, libraries, domains, teams, infrastructure), scorecards (engineering standards and best practices), initiatives (goals and deadlines), and Engineering Intelligence metrics. It includes tools for querying documentation, tracking personal entities, and accessing AI-assisted insights across the entire Cortex ecosystem.
Related MCP Servers
- AlicenseAqualityBmaintenanceAn MCP server for SonarQube that enables LLM agents to discover projects, analyze code quality metrics, check Quality Gate status, search issues with filters, and rank projects by worst-performing metrics. It provides read-only, safe access to SonarQube instances with structured outputs and error handling.521 PyPIMIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server that provides AI assistants with access to SonarQube code quality, security, and project analytics data.736 npmMIT
- AlicenseCqualityDmaintenanceA Python MCP server for SonarQube, enabling AI agents to query projects, issues, quality gates, coverage, and security hotspots.13MIT
- FlicenseNot gradedqualityAmaintenanceMCP server that exposes SonarQube data as AI agent tools, enabling project discovery, quality gates, measures, issues, hotspots, rule explanations, source code, and raw API access.4-