{"slug":"sonarqube","kind":"mcp","name":"SonarQube MCP Server","summary":"SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.","owner":"SonarSource","repoUrl":"https://github.com/SonarSource/sonarqube-mcp-server","license":"Source-available","licenseTier":"source-available","trust":"official","stars":664,"logoUrl":"https://github.com/SonarSource.png?size=96","linkOnly":false,"categories":["developer-tools"],"tags":["sonarqube","code-quality","security","static-analysis","quality-gates"],"runtime":"docker","local":true,"cloudCapable":true,"cloudCapability":"yes","cloudReadyOnPlatform":false,"needsApiKey":true,"reviewed":false,"syncedAt":"2026-10-13T00:00:00.000Z","sample":false,"url":"https://conduits.dev/tools/sonarqube","language":"Java","transports":["stdio","http"],"install":{"docker":"sonarsource/sonarqube-mcp"},"requirements":{"env":[{"name":"SONARQUBE_TOKEN","secret":true,"required":true,"description":"SonarQube user token (Server needs a USER token)"},{"name":"SONARQUBE_ORG","secret":false,"required":false,"description":"Required for SonarQube Cloud; selects Cloud in stdio mode"},{"name":"SONARQUBE_URL","secret":false,"required":false,"description":"Required for SonarQube Server; optional for Cloud"},{"name":"SONARQUBE_READ_ONLY","secret":false,"required":false,"description":"Set true to disable write operations"}],"service":"SonarQube","upstreamMayCharge":false},"tools":[{"name":"analyze_code_snippet","description":"Analyze a code snippet"},{"name":"analyze_file_list","description":"Analyze a list of files"},{"name":"search_sonar_issues_in_projects","description":"Search issues across projects"},{"name":"change_sonar_issue_status","description":"Change an issue status"},{"name":"search_security_hotspots","description":"Search security hotspots"},{"name":"get_project_quality_gate_status","description":"Get a project's quality gate status"},{"name":"search_dependency_risks","description":"Search dependency risks"}],"readme":"# SonarQube MCP Server\n\nSonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.\n\n## Install\n\n```bash\ndocker run -i --rm sonarsource/sonarqube-mcp\n```\n\n## Configuration\n\n| Variable | Required | Description |\n| --- | --- | --- |\n| `SONARQUBE_TOKEN` | Yes | SonarQube user token (Server needs a USER token) |\n| `SONARQUBE_ORG` | No | Required for SonarQube Cloud; selects Cloud in stdio mode |\n| `SONARQUBE_URL` | No | Required for SonarQube Server; optional for Cloud |\n| `SONARQUBE_READ_ONLY` | No | Set true to disable write operations |\n\n## Tools\n\n- `analyze_code_snippet` — Analyze a code snippet\n- `analyze_file_list` — Analyze a list of files\n- `search_sonar_issues_in_projects` — Search issues across projects\n- `change_sonar_issue_status` — Change an issue status\n- `search_security_hotspots` — Search security hotspots\n- `get_project_quality_gate_status` — Get a project's quality gate status\n- `search_dependency_risks` — Search dependency risks\n\n## About this listing\n\nDetails were gathered from the project's public pages on 2026-10-13 and have not been reviewed by a person yet. Read the project's own documentation before giving it access to anything sensitive.\n\nSources:\n\n- <https://github.com/SonarSource/sonarqube-mcp-server>"}