mcp server

SonarQube MCP Server

SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.

SonarSource/sonarqube-mcp-serverofficiallistedunreviewednot running here yet

Use tool

Set up

Runs on your computer. Pick your agent and operating system.

Before you start

Docker Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "sonarqube": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "SONARQUBE_ORG",
        "-e",
        "SONARQUBE_URL",
        "-e",
        "SONARQUBE_READ_ONLY",
        "sonarsource/sonarqube-mcp"
      ],
      "env": {
        "SONARQUBE_TOKEN": "<your SONARQUBE_TOKEN>"
      }
    }
  }
}

same format Cursor, GitHub Copilot CLI, Junie, JetBrains AI Assistant, Augment (Auggie CLI), Factory Droid, Kiro, Devin CLI +12

Values in angle brackets are placeholders. Restart Claude Desktop after editing its config.Claude Desktop docs

Tools provided

As listed by the project. Your agent asks before calling them, depending on its settings.

analyze_code_snippetAnalyze a code snippet
analyze_file_listAnalyze a list of files
search_sonar_issues_in_projectsSearch issues across projects
change_sonar_issue_statusChange an issue status
search_security_hotspotsSearch security hotspots
get_project_quality_gate_statusGet a project's quality gate status
search_dependency_risksSearch dependency risks

README

synced Oct 13, 2026

SonarQube MCP Server

SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.

Install

docker run -i --rm sonarsource/sonarqube-mcp

Configuration

Variable	Required	Description
`SONARQUBE_TOKEN`	Yes	SonarQube user token (Server needs a USER token)
`SONARQUBE_ORG`	No	Required for SonarQube Cloud; selects Cloud in stdio mode
`SONARQUBE_URL`	No	Required for SonarQube Server; optional for Cloud
`SONARQUBE_READ_ONLY`	No	Set true to disable write operations

Tools

analyze_code_snippet — Analyze a code snippet
analyze_file_list — Analyze a list of files
search_sonar_issues_in_projects — Search issues across projects
change_sonar_issue_status — Change an issue status
search_security_hotspots — Search security hotspots
get_project_quality_gate_status — Get a project's quality gate status
search_dependency_risks — Search dependency risks

About this listing

Details were gathered from the project's public pages on 2026-10-13 and have not been reviewed by a person yet. Read the project's own documentation before giving it access to anything sensitive.

Sources:

https://github.com/SonarSource/sonarqube-mcp-server