1. Conduid
  2. Security
  3. Sonarcube MCP Server
MCP server · Security

Sonarcube MCP Server

· github.com/bhayanak/sonarqube-mcp-server

MCP server for SonarQube — code quality, issues, quality gates, hotspots, metrics, rules

Unclaimed mcpmcp serversonarqubecode-qualitysecuritystatic-analysisdevopsaicopilotquality-gatehotspots
InstallView source
37Low

Scored 4 months ago · breakdown

About Sonarcube MCP Server

Sonarcube MCP Server is an MCP server in the Security category: mCP server for SonarQube — code quality, issues, quality gates, hotspots, metrics, rules. It has been installed 0 times through Conduid.

Install

Claude Code
claude mcp add sonarcube-mcp-server -- npx -y sonarcube-mcp-server
npx
npx -y sonarcube-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Sonarcube MCP Server

Powered by Claude · Grounded in docs

I know everything about Sonarcube MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

README

🛡️ SonarQube MCP Server

📦 Packages

This monorepo contains two packages:

Package Description Docs
sonarqube-mcp-server Standalone MCP server (npm, CLI, stdio) 📖 README
sonarqube-mcp-extension VS Code extension with built-in MCP server 📖 README

🔧 12 Tools at a Glance

Tool What it does
sq_list_projects List projects with quality status
sq_get_project Project overview with metrics
sq_search_issues Search bugs, vulns & code smells
sq_get_issue Full issue details
sq_get_quality_gate Quality gate status & conditions
sq_search_hotspots Security hotspots needing review
sq_get_hotspot Hotspot details & remediation
sq_get_measures Code quality metrics
sq_get_measures_history Metric trends over time
sq_get_rule Rule details & guidance
sq_search_rules Search rules by language/type
sq_get_component_tree File tree with metrics

🚀 Quick Start

Option 1 — VS Code Extension (Recommended)

  1. Install SonarQube MCP from the VS Code Marketplace
  2. Set sonarqubeMcp.baseUrl and sonarqubeMcp.token in VS Code settings
  3. The MCP server appears automatically in VS Code's MCP panel — start/stop/restart from there

→ Extension docs

Option 2 — Standalone CLI

npm install -g sonarqube-mcp-server

export SONAR_MCP_BASE_URL="https://sonarcloud.io"
export SONAR_MCP_TOKEN="squ_your_token"
sonarqube-mcp-server

→ Server docs

Option 3 — MCP Client Config (Claude Desktop, Cursor, etc.)

{
  "mcpServers": {
    "sonarqube": {
      "command": "npx",
      "args": ["sonarqube-mcp-server"],
      "env": {
        "SONAR_MCP_BASE_URL": "https://sonarcloud.io",
        "SONAR_MCP_TOKEN": "squ_your_token"
      }
    }
  }
}

📄 License

MIT © bhayanak

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Sonarcube MCP Server

How do I install Sonarcube MCP Server?

Run claude mcp add sonarcube-mcp-server -- npx -y sonarcube-mcp-server, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Sonarcube MCP Server safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sonarcube MCP Server still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.