SonarQube MCP Server

MCPOfficialOpen SourceNOASSERTION81.8

by SonarSource • Uncategorized

An MCP server enabling integration with SonarQube for code quality and security analysis.

Example Use Cases

1
Integrate with SonarQube Cloud for code quality and security analysis.
2
Connect with SonarQube Server to analyze code snippets within their context.
3
That require a containerized MCP server to facilitate code quality checks.

Description

The SonarQube MCP Server is a Model Context Protocol server that facilitates seamless integration with SonarQube Server or SonarQube Cloud. It supports analyzing code snippets directly within the agent context, enhancing code quality and security workflows. The server can be deployed easily using a container image and integrates with various agents and tools.

Capabilities(4 total)

Tools (4)

change_sonar_issue_status

Change the status of an issue. This tool can be used to change the status of an issue to "accept", "falsepositive" or to "reopen" an issue. An example request could be: I would like to accept the issue having the key "AX-HMISMFixnZED"

key:string*status:array*

search_my_sonarqube_projects

Find SonarQube projects in your organization. Supports searching by project name or key. Use this first when projectKey is unknown - most other tools require the project key from this response.

q:stringpageSize:numberpage:string

search_sonar_issues_in_projects

Search for issues (bugs, vulnerabilities, code smells) in my organization's projects. Filter by severities=['HIGH','BLOCKER'] for critical issues, impactSoftwareQualities=['SECURITY'] for security, issueStatuses=['OPEN'] to exclude resolved.

p:numberimpactSoftwareQualities:arrayissueStatuses:arrayprojects:arrayissueKey:arrayps:numberfiles:arraypullRequestId:stringseverities:array

list_pull_requests

List all pull requests for a project. Use this tool to discover available pull requests and their corresponding branch names before analyzing their coverage, issues, or quality. Returns the pull request key/ID and source branch for each PR, which can be used with other tools that accept a pullRequest parameter.

projectKey:string*

Quick Actions

View on GitHub

Security

Scanned 1 month(s) ago

Risk Level

MINIMAL

Read-only data retrieval, no side effects

Trust Score

B66/100

8/17 checks passed

Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.

Quick Stats

Service TypeMCP

Pricing ModelFree

Capabilities4 Tools / 0 Prompts / 0 Resources

OwnerSonarSource

CategoryUncategorized

DependenciesStandalone

Set Your Username