MCP Catalogs
Home

sonarqube-mcp-server

by SonarSource·554·Score 53

SonarQube MCP Server enables code quality and security analysis within AI agents via the MCP protocol.

developer-toolsmonitoringsecurity
82
Forks
13
Open issues
this month
Last commit
2d ago
Indexed

Overview

The SonarQube MCP Server provides seamless integration with SonarQube Server or Cloud, allowing AI agents to access code quality metrics and security analysis. It enables both project-level analysis and direct code snippet evaluation within the agent context. The server supports multiple deployment methods including Docker containers and is compatible with various AI clients like Claude, Copilot, and VS Code.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

you:AI-assisted code quality analysis during development
you:Automated security issue detection in code reviews
you:Integration of SonarQube metrics into AI-powered development workflows
you:What authentication methods are supported?
you:Can it analyze code snippets directly?

When to choose this

Choose this when you need to integrate code quality analysis into AI workflows and are already using SonarQube.

When NOT to choose this

Don't choose if you're not using SonarQube or need to integrate with other code quality tools like SonarCloud or static analysis platforms.

Comparable tools

sonarcloud-mcp-servergithub-codeql-mcpgitguardian-mcpsemgrep-mcp

Installation

Installation

The SonarQube MCP Server is distributed as a Docker container image. The simplest installation method is using the provided container image mcp/sonarqube:

docker run --init --pull=always -i --rm -e SONARQUBE_TOKEN -e SONARQUBE_ORG mcp/sonarqube

For Claude Desktop, add to your claude_desktop_config.json:

{
  "mcpServers": {
    "sonarqube": {
      "command": "docker",
      "args": ["run", "--init", "--pull=always", "-i", "--rm", "-e", "SONARQUBE_TOKEN", "-e", "SONARQUBE_ORG", "mcp/sonarqube"],
      "env": {
        "SONARQUBE_TOKEN": "<YOUR_TOKEN>",
        "SONARQUBE_ORG": "<YOUR_ORG>"
      }
    }
  }
}

[Configuration Generator](https://mcp.sonarqube.com/config-generator.html) provides an interactive setup tool for various AI clients.

FAQ

What authentication methods are supported?
The server uses SonarQube user tokens for authentication. For SonarQube Cloud, you need an organization key. For SonarQube Server, you need the server URL and a user token.
Can it analyze code snippets directly?
Yes, the SonarQube MCP Server supports the analysis of code snippets directly within the agent context without requiring a full project setup.

Compare sonarqube-mcp-server with

GitHub →

Last updated · Auto-generated from public README + GitHub signals.