1. Conduid
  2. Security
  3. Sonarqubemcp
MCP server · Security

Sonarqubemcp

by · github.com/akashlomas/sonarqubemcp

A Model Context Protocol (MCP) server for interacting with SonarQube APIs, providing tools for authentication, project management, and metrics retrieval.

Unclaimed last commit a year ago security
InstallView source
34Low

Scored a month ago · breakdown

About Sonarqubemcp

Sonarqubemcp is an MCP server published by akashlomas in the Security category: a Model Context Protocol (MCP) server for interacting with SonarQube APIs, providing tools for authentication, project management, and metrics retrieval.

The repository has 1 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/akashlomas/sonarqubemcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (4)

authenticate`token?`

Parameters not published.

get_project_details`token?`, `projectKey`

Parameters not published.

get_project_metrics`token?`, `projectKey`, `metrics`

Parameters not published.

list_projects`token?`

Parameters not published.

Ask AI

✦

Ask AI about Sonarqubemcp

Powered by Claude · Grounded in docs

I know everything about Sonarqubemcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Sonarqubemcp

How do I install Sonarqubemcp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Sonarqubemcp safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sonarqubemcp still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.