Sonarqube MCP Server
UnclaimedOfficial SonarQube MCP Server for code quality and security in AI agents
Install
docker run --init --pull=always -i --rm -e SONARQUBE_TOKEN -e SONARQUBE_ORG sonarsource/sonarqube-mcpUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverTools (40)
analyze_code_snippet
Analyze file content with SonarQube analyzers to identify code quality and security issues. Always analyzes the complete file content for accuracy. Optionally filter results to a specific code snippet.
analyze_file_list
Analyze files in the current working directory using SonarQube for IDE. This tool connects to a running SonarQube for IDE instance to perform code quality analysis on a list of files.
branch
Branch name used to retrieve the latest analysis context - Required String
change_sonar_issue_status
Change the status of a SonarQube issue to "accept", "falsepositive" or to "reopen" an issue.
codeSnippet
Code snippet to filter issues (must match content in fileContent) - String
enabled
Enable or disable the automatic analysis - Required Boolean
enterpriseKey
Optional enterprise key to filter results - String
file_absolute_paths
List of absolute file paths to analyze - Required String[]
fileContent
Complete file content as a string. Required when workspace is not mounted - String
filePath
Project-relative path of the file to analyze (e.g., src/main/java/MyClass.java). Used when the workspace is mounted at /app/mcp-workspace - String
files
Optional list of file paths to filter - String[]
fileScope
Defines in which scope the file originates from: 'MAIN' or 'TEST' (default: MAIN) - String
from
First line to analyze (1-based, default: 1) - Number
get_file_coverage_details
Get line-by-line coverage information for a specific file, including which exact lines are uncovered and which have partially covered branches. This tool helps identify precisely where to add test coverage. Use after identifying files with low coverage via searchfilesbycoverage.
hotspotKeys
Comma-separated list of specific Security Hotspot keys to retrieve - String[]
impactSoftwareQualities
Optional list of software qualities to filter by. Possible values: MAINTAINABILITY, RELIABILITY, SECURITY - String[]
issueKey
Optional issue key to fetch a specific issue - String
issueStatuses
Optional list of issue statuses to filter by. Possible values: OPEN, CONFIRMED, FALSEPOSITIVE, ACCEPTED, FIXED, INSANDBOX - String[]
key
File key (e.g. myproject:src/foo/Bar.java) - Required String
language
Language of the code (e.g., 'java', 'python', 'js', 'ts', 'tsx', 'jsx') - String
list_enterprises
List the enterprises available in SonarQube Cloud that you have access to. Use this tool to discover enterprise IDs that can be used with other tools.
maxCoverage
Maximum coverage threshold (0-100). Only return files with coverage <= this value - Number
onlyMine
Show only hotspots assigned to me - Boolean
pageIndex
Page index (1-based, default: 1) - Number
pageSize
Page size (default: 100, max: 500) - Number
projectKey
The SonarQube project key - Required String (Ignored when SONARQUBEPROJECTKEY is defined)
projectKeys
Optional list of SonarQube project keys - String[]
pullRequest
Optional pull request key/ID. Use listpullrequests to discover valid keys - String
resolution
Optional resolution filter: FIXED, SAFE, ACKNOWLEDGED - String
run_advanced_code_analysis
Run Vortex analysis on SonarQube Cloud for a single file. Organization is inferred from MCP configuration.
scope
Scope of the file: MAIN or TEST (default: MAIN) - String
search_dependency_risks
Search for software composition analysis issues (dependency risks) of a SonarQube project, paired with releases that appear in the analyzed project, application, or portfolio.
search_files_by_coverage
Search for files in a project sorted by coverage (ascending - worst coverage first). This tool helps identify files that need test coverage improvements.
search_security_hotspots
Search for Security Hotspots in a SonarQube project.
search_sonar_issues_in_projects
Search for SonarQube issues in my organization's projects.
severities
Optional list of severities to filter by. Possible values: INFO, LOW, MEDIUM, HIGH, BLOCKER - String[]
sinceLeakPeriod
Filter hotspots created since the leak period (new code) - Boolean
status
New issue's status - Required Enum {"accept", "falsepositive", "reopen"}
to
Last line to analyze (inclusive). If not specified, all lines are returned - Number
toggle_automatic_analysis
Enable or disable SonarQube for IDE automatic analysis. When enabled, SonarQube for IDE will automatically analyze files as they are modified in the working directory. When disabled, automatic analysis is turned off.