Sonarqube Mcp Server
Let your agent query SonarQube Server or Cloud for code quality and security findings while you fix issues pre-release.
Overview
sonarqube-mcp-server is a MCP server for the Ship phase that integrates SonarQube Server or Cloud so agents can work with code quality and security findings.
What is this MCP server?
- Official SonarSource MCP server version 1.7.0
- Works with SonarQube Server or SonarQube Cloud via user token
- OCI package docker.io/mcp/sonarqube:latest with stdio transport
- Env vars: SONARQUBE_TOKEN required; SONARQUBE_URL or SONARQUBE_ORG for target instance
- 3 documented SonarQube-related environment variables
- stdio transport via published OCI package docker.io/mcp/sonarqube:latest
Community signal: 571 GitHub stars.
What problem does it solve?
Jumping between SonarQube dashboards and your repo slows remediation, so agents lack live context on quality and security debt.
Who is it for?
Solo builders already using SonarQube who want Claude Code or Cursor to help triage and fix reported quality and security issues.
Skip if: Projects with no SonarQube instance or teams that only need generic grep-based review without a Sonar account.
What do I get? / Deliverables
After you add the Docker stdio MCP server with a Sonar user token, your agent can reason over SonarQube issues while you patch and harden the codebase.
- Agent-driven access to SonarQube quality and security context
- Faster issue remediation aligned with your Sonar project configuration
Recommended MCP Servers
Journey fit
How it compares
SonarQube-backed quality and security MCP bridge, not a standalone static analyzer skill.
Common Questions / FAQ
Who is sonarqube-mcp-server for?
Developers on SonarQube Server or Cloud who want MCP access to quality and security data from their coding agent.
When should I use sonarqube-mcp-server?
Use it in Ship when reviewing findings, fixing vulnerabilities, or clearing quality gate blockers before release.
How do I add sonarqube-mcp-server to my agent?
Run the OCI image docker.io/mcp/sonarqube:latest as a stdio MCP server with SONARQUBE_TOKEN set, plus SONARQUBE_URL for Server or SONARQUBE_ORG for Cloud.