Loading listing…
SonarQube MCP Server
Security scan passedYour agent checks quality gates, explains issues, Security Hotspots and coverage gaps, and analyzes code with SonarQube Cloud or Server.
by sonarsource· Developer toolsUnclaimed · Yours? Claim it
What SonarQube MCP Server does
About
Sonar's SonarQube MCP Server connects your agent to the code quality and security data in SonarQube Cloud or SonarQube Server, so it can check your work and fix what SonarQube finds without you leaving the chat. What you can do with it - Check a project's quality gate, on a branch or a pull request, and find out why it's failing before you merge - Search issues across your projects, have them explained, and accept them, mark them false positives or reopen them - Review Security Hotspots and the dependency risks in a project - Find the files with the lowest test coverage and the exact lines left uncovered - Analyze a file or a code snippet with SonarQube's analyzers before you commit - Look up rules, measures, duplications, branches and pull requests How it connects It runs on your machine as the sonarsource/sonarqube-mcp container image (Docker or another OCI runtime), or as a JAR with Java 21 or later. Give it a SonarQube user token as SONARQUBE_TOKEN. On its own, the token connects to SonarQube Cloud, and SONARQUBE_ORG fixes the organization. For SonarQube Server (2025.1 or later) or SonarQube Cloud US, set SONARQUBE_URL as well and pass it into the container with -e SONARQUBE_URL, as the install steps do for SONARQUBE_TOKEN. Sonar also runs the server inside SonarQube Cloud at https://api.sonarcloud.io/mcp, with a smaller, fixed set of tools. Read-only when you want it Set SONARQUBE_READ_ONLY=true to turn off every tool that changes something, such as changing an issue's status. SONARQUBE_TOOLSETS limits which groups of tools load, which keeps the context small. Good to know It sends anonymous usage data to Sonar unless you set TELEMETRY_DISABLED=true. Its Sonar Vortex tools need a Vortex subscription.
More from Developer tools
Plugins people install alongside SonarQube MCP Server.
