SonarQube

Name: SonarQube
Author: dhanush-dev01

@dhanush-dev01

About SonarQube

The SonarQube MCP (Model Context Protocol) Server is a custom-built AI-powered backend designed to integrate with SonarQube and enable intelligent, context-aware interactions between static code analysis and modern AI agents like GitHub Copilot, VS Code Agents, or any LLM-powered

#sonarqube #code-analysis #ai-integration

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "sonarqubemcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--init",
        "-e",
        "SONARQUBE_URL",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "PROJECT_KEY",
        "dhanushhypervisor/sonarqube_mcp_server"
      ],
      "env": {
        "SONARQUBE_URL": "",
        "SONARQUBE_TOKEN": "",
        "PROJECT_KEY": ""
      }
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is SonarQube?

This server bridges SonarQube APIs to MCP-compliant clients, enabling you to monitor and analyze code quality. It provides tools for health checks, token validation, project issues, project listing, and project metrics.

How to use SonarQube?

Set the environment variables SONARQUBE_URL, SONARQUBE_TOKEN, and PROJECT_KEY. Install the required dependencies (FastMCP, Requests) from requirements.txt and run the server using Python. Alternatively, use Docker by passing the environment variables at runtime. The server can be integrated with VS Code via the MCP settings.

Key features of SonarQube

Health check endpoint to verify server status
Token validation to authenticate and retrieve user info
Fetch unresolved issues (bugs, code smells, vulnerabilities)
List all accessible SonarQube projects
Retrieve key quality metrics (bugs, coverage, duplication, ratings)

Use cases of SonarQube

Continuous code quality monitoring in CI/CD pipelines
Automated issue reporting for developer teams
Project onboarding with quick quality overview
Integration with IDEs for real‑time code analysis
Auditing code health across multiple projects

FAQ from SonarQube

What is the health check endpoint?

The sonar_health_check endpoint returns the current health status and connection information of your SonarQube server.

How do I validate my authentication token?

Use the get_token_info endpoint. It validates your SONARQUBE_TOKEN and returns authentication status and associated user details.

What happens if I provide an invalid project key?

The server returns a detailed error message. Error handling covers invalid project keys, connection issues, authentication failures, and permission problems.