SonarQube

SonarQube

MCP server enabling seamless SonarQube Cloud/Server integration for code quality analysis.

181
Stars
23
Forks
12
Releases

Overview

The SonarQube MCP Server is a Model Context Protocol (MCP) server that enables seamless integration with SonarQube Server or Cloud for code quality and security. It also supports the analysis of code snippet directly within the agent context. The server can be deployed via the official Docker image mcp/sonarqube or built locally from source. It supports three transport modes—stdio (default, single-user), HTTP (multi-user with per-client tokens), and HTTPS (TLS-enabled multi-user)—to fit development and production needs. Configuration is driven by a combination of environment variables (e.g., STORAGE_PATH, SONARQUBE_TOKEN, SONARQUBE_ORG/URL) and MCP configuration blocks. It offers selective tool enabling through SONARQUBE_TOOLSETS and a read-only mode via SONARQUBE_READ_ONLY, helping reduce context overhead and protect changes. The MCP server exposes a wide range of tools—analysis, issues, projects, quality gates, rules, sources, measures, languages, portfolios, system, webhooks, and dependency risks (where available)—and supports Enterprise/Cloud features. Additional capabilities include custom certificates, HTTP proxies, and custom TLS settings for private CA setups, as well as IDE integration guidance for SonarQube IDE and related tooling. Telemetry can be disabled for privacy.

Details

Owner
SonarSource
Language
Java
License
Other
Updated
2025-12-07

Features

Docker-based deployment

Easily deploy via the official Docker image mcp/sonarqube for quick setup.

Transport modes

Supports Stdio (default), HTTP, and HTTPS transports for multi-user scenarios.

Selective toolsets and read-only mode

Enable specific toolsets with SONARQUBE_TOOLSETS; optional read-only mode with SONARQUBE_READ_ONLY.

IDE integration

Integrates with SonarQube for IDE and provides port configuration for IDE connections.

TLS and certificates

Supports custom certificates and TLS options, including private CA certificates.

Proxy support

Configurable HTTP/HTTPS proxy via Java system properties.

Manual configuration and build

Manual MCP configuration and local build flow using Gradle and Java 21+.

Telemetry control

Telemetry can be disabled via TELEMETRY_DISABLED.

Audience

DevelopersIntegrate SonarQube analysis into local and CI workflows using MCP.
DevOps EngineersDeploy and manage MCP server instances with Docker and transport settings.
IDE UsersPerform inline code quality analysis within IDE workflows via MCP integration.

Tags

SonarQubeMCPServerCloudCode AnalysisSecurityIDEDockerTLSProxyTelemetryConfiguration