1. Conduid
  2. Security
  3. Sonarcube MCP Server
MCP server · Security

Sonarcube MCP Server

· github.com/bhayanak/sonarqube-mcp-server

MCP server for SonarQube — code quality, issues, quality gates, hotspots, metrics, rules

Unclaimed mcpmcp serversonarqubecode-qualitysecuritystatic-analysisdevopsaicopilotquality-gatehotspots
InstallView source
37Low

Scored 6 months ago · breakdown

About Sonarcube MCP Server

Sonarcube MCP Server is an MCP server in the Security category: mCP server for SonarQube — code quality, issues, quality gates, hotspots, metrics, rules.

Install

Claude Code
claude mcp add sonarcube-mcp-server -- npx -y sonarcube-mcp-server
npx
npx -y sonarcube-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (12)

sq_get_component_treeFile tree with metrics

Parameters not published.

sq_get_hotspotHotspot details & remediation

Parameters not published.

sq_get_issueFull issue details

Parameters not published.

sq_get_measuresCode quality metrics

Parameters not published.

sq_get_measures_historyMetric trends over time

Parameters not published.

sq_get_projectProject overview with metrics

Parameters not published.

sq_get_quality_gateQuality gate status & conditions

Parameters not published.

sq_get_ruleRule details & guidance

Parameters not published.

sq_list_projectsList projects with quality status

Parameters not published.

sq_search_hotspotsSecurity hotspots needing review

Parameters not published.

sq_search_issuesSearch bugs, vulns & code smells

Parameters not published.

sq_search_rulesSearch rules by language/type

Parameters not published.

Ask AI

✦

Ask AI about Sonarcube MCP Server

Powered by Claude · Grounded in docs

I know everything about Sonarcube MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

🛡️ SonarQube MCP Server

📦 Packages

This monorepo contains two packages:

Package Description Docs
sonarqube-mcp-server Standalone MCP server (npm, CLI, stdio) 📖 README
sonarqube-mcp-extension VS Code extension with built-in MCP server 📖 README

🔧 12 Tools at a Glance

Tool What it does
sq_list_projects List projects with quality status
sq_get_project Project overview with metrics
sq_search_issues Search bugs, vulns & code smells
sq_get_issue Full issue details
sq_get_quality_gate Quality gate status & conditions
sq_search_hotspots Security hotspots needing review
sq_get_hotspot Hotspot details & remediation
sq_get_measures Code quality metrics
sq_get_measures_history Metric trends over time
sq_get_rule Rule details & guidance
sq_search_rules Search rules by language/type
sq_get_component_tree File tree with metrics

🚀 Quick Start

Option 1 — VS Code Extension (Recommended)

  1. Install SonarQube MCP from the VS Code Marketplace
  2. Set sonarqubeMcp.baseUrl and sonarqubeMcp.token in VS Code settings
  3. The MCP server appears automatically in VS Code's MCP panel — start/stop/restart from there

→ Extension docs

Option 2 — Standalone CLI

npm install -g sonarqube-mcp-server

export SONAR_MCP_BASE_URL="https://sonarcloud.io"
export SONAR_MCP_TOKEN="squ_your_token"
sonarqube-mcp-server

→ Server docs

Option 3 — MCP Client Config (Claude Desktop, Cursor, etc.)

{
  "mcpServers": {
    "sonarqube": {
      "command": "npx",
      "args": ["sonarqube-mcp-server"],
      "env": {
        "SONAR_MCP_BASE_URL": "https://sonarcloud.io",
        "SONAR_MCP_TOKEN": "squ_your_token"
      }
    }
  }
}

📄 License

MIT © bhayanak

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About Sonarcube MCP Server

How do I install Sonarcube MCP Server?

Run claude mcp add sonarcube-mcp-server -- npx -y sonarcube-mcp-server, then add the server to your MCP client's configuration.

Is Sonarcube MCP Server safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sonarcube MCP Server still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.