SonarQube

Name: SonarQube
Author: dhanush-dev01

@dhanush-dev01

关于 SonarQube

The SonarQube MCP (Model Context Protocol) Server is a custom-built AI-powered backend designed to integrate with SonarQube and enable intelligent, context-aware interactions between static code analysis and modern AI agents like GitHub Copilot, VS Code Agents, or any LLM-powered

#sonarqube #code-analysis #ai-integration

基本信息

分类

其他

传输方式

stdio

发布者

dhanush-dev01

提交者

Dhanush L

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "sonarqubemcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--init",
        "-e",
        "SONARQUBE_URL",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "PROJECT_KEY",
        "dhanushhypervisor/sonarqube_mcp_server"
      ],
      "env": {
        "SONARQUBE_URL": "",
        "SONARQUBE_TOKEN": "",
        "PROJECT_KEY": ""
      }
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is SonarQube?

This server bridges SonarQube APIs to MCP-compliant clients, enabling you to monitor and analyze code quality. It provides tools for health checks, token validation, project issues, project listing, and project metrics.

How to use SonarQube?

Set the environment variables SONARQUBE_URL, SONARQUBE_TOKEN, and PROJECT_KEY. Install the required dependencies (FastMCP, Requests) from requirements.txt and run the server using Python. Alternatively, use Docker by passing the environment variables at runtime. The server can be integrated with VS Code via the MCP settings.

Key features of SonarQube

Health check endpoint to verify server status
Token validation to authenticate and retrieve user info
Fetch unresolved issues (bugs, code smells, vulnerabilities)
List all accessible SonarQube projects
Retrieve key quality metrics (bugs, coverage, duplication, ratings)

Use cases of SonarQube

Continuous code quality monitoring in CI/CD pipelines
Automated issue reporting for developer teams
Project onboarding with quick quality overview
Integration with IDEs for real‑time code analysis
Auditing code health across multiple projects

FAQ from SonarQube

What is the health check endpoint?

The sonar_health_check endpoint returns the current health status and connection information of your SonarQube server.

How do I validate my authentication token?

Use the get_token_info endpoint. It validates your SONARQUBE_TOKEN and returns authentication status and associated user details.

What happens if I provide an invalid project key?

The server returns a detailed error message. Error handling covers invalid project keys, connection issues, authentication failures, and permission problems.