Koskamo

SonarQube MCP

The SonarQube MCP Server enables seamless integration with SonarQube Server or Cloud for code quality and security analysis. It allows AI agents to analyze code snippets directly within the agent context and interact with the SonarQube web API to identify quality and security issues.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

SonarQube MCP logo, by SonarSourceCommunity listingLocal stdioSource reviewed; not executedPublished by SonarSource
You need:Provide the required SonarQube User tokenset tokens in environment variables before running commands
Vendor documentation

What you can do with it

  • Analyze code snippets for quality and security issues
  • Integrate with SonarQube Server or Cloud
  • Identify code quality and security vulnerabilities

Source and maintenance

Community listing
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7

oci
mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7 package definition
{
  "transport": "stdio",
  "identifier": "mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7",
  "registryType": "oci",
  "registryBaseUrl": "https://registry-1.docker.io"
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

analyze_code_snippet
Reported by the attributed source; not independently observed by Koskamo.
analyze_code_snippet input schema
{
  "type": "",
  "required": null,
  "properties": null
}
analyze_file_list
Reported by the attributed source; not independently observed by Koskamo.
analyze_file_list input schema
{
  "type": "",
  "required": null,
  "properties": null
}
toggle_automatic_analysis
Reported by the attributed source; not independently observed by Koskamo.
toggle_automatic_analysis input schema
{
  "type": "",
  "required": null,
  "properties": null
}
search_sonar_issues_in_projects
Reported by the attributed source; not independently observed by Koskamo.
search_sonar_issues_in_projects input schema
{
  "type": "",
  "required": null,
  "properties": null
}
change_sonar_issue_status
Reported by the attributed source; not independently observed by Koskamo.
change_sonar_issue_status input schema
{
  "type": "",
  "required": null,
  "properties": null
}
search_my_sonarqube_projects
Reported by the attributed source; not independently observed by Koskamo.
search_my_sonarqube_projects input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_quality_gates
Reported by the attributed source; not independently observed by Koskamo.
list_quality_gates input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_project_quality_gate_status
Reported by the attributed source; not independently observed by Koskamo.
get_project_quality_gate_status input schema
{
  "type": "",
  "required": null,
  "properties": null
}
show_rule
Reported by the attributed source; not independently observed by Koskamo.
show_rule input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_rule_repositories
Reported by the attributed source; not independently observed by Koskamo.
list_rule_repositories input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_languages
Reported by the attributed source; not independently observed by Koskamo.
list_languages input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_component_measures
Reported by the attributed source; not independently observed by Koskamo.
get_component_measures input schema
{
  "type": "",
  "required": null,
  "properties": null
}
search_metrics
Reported by the attributed source; not independently observed by Koskamo.
search_metrics input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_raw_source
Reported by the attributed source; not independently observed by Koskamo.
get_raw_source input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_scm_info
Reported by the attributed source; not independently observed by Koskamo.
get_scm_info input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_system_health
Reported by the attributed source; not independently observed by Koskamo.
get_system_health input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_system_status
Reported by the attributed source; not independently observed by Koskamo.
get_system_status input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_system_logs
Reported by the attributed source; not independently observed by Koskamo.
get_system_logs input schema
{
  "type": "",
  "required": null,
  "properties": null
}
ping_system
Reported by the attributed source; not independently observed by Koskamo.
ping_system input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_system_info
Reported by the attributed source; not independently observed by Koskamo.
get_system_info input schema
{
  "type": "",
  "required": null,
  "properties": null
}
create_webhook
Reported by the attributed source; not independently observed by Koskamo.
create_webhook input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_webhooks
Reported by the attributed source; not independently observed by Koskamo.
list_webhooks input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_portfolios
Reported by the attributed source; not independently observed by Koskamo.
list_portfolios input schema
{
  "type": "",
  "required": null,
  "properties": null
}
list_enterprises
Reported by the attributed source; not independently observed by Koskamo.
list_enterprises input schema
{
  "type": "",
  "required": null,
  "properties": null
}
search_dependency_risks
Reported by the attributed source; not independently observed by Koskamo.
search_dependency_risks input schema
{
  "type": "",
  "required": null,
  "properties": null
}

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.
Cursor configuration
{
  "mcpServers": {
    "sonarqube-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7"
      ]
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.
Cline configuration
{
  "mcpServers": {
    "sonarqube-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7"
      ]
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.
VS Code configuration
{
  "servers": {
    "sonarqube-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7"
      ]
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.
Claude Desktop configuration
{
  "mcpServers": {
    "sonarqube-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/sonarqube@sha256:925c88bc7cab2a1e1025b0bd43f0af504cd8ce1b99e9663ececaca914fb632e7"
      ]
    }
  }
}

Let your agent find its tools

Find servers like SonarQube MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.