SonarQube MCP
A community-driven MCP server that enables LLM agents to interact with SonarQube and SonarCloud. It provides read-only tools for listing projects, retrieving metrics, checking quality gate status, searching issues with filters, and ranking projects by worst metric values. It supports Python 3.10+, uses stdio transport, and includes Pydantic validation for safe parameterization.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Discover projects and pull headline metrics
- Check Quality Gate status and per-condition failures
- Search issues filtered by severity, type, or resolution
- Rank projects by the worst value of a specific metric
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
sonarqube-mcp 0.1.0
{
"version": "0.1.0",
"transport": "stdio",
"identifier": "sonarqube-mcp",
"registryType": "pypi",
"environmentVariables": [
{
"name": "SONARQUBE_URL",
"format": "string",
"isRequired": true,
"description": "SonarQube URL (e.g. https://sonar.example.com or https://sonarcloud.io)"
},
{
"name": "SONARQUBE_TOKEN",
"format": "string",
"isRequired": true,
"description": "SonarQube authentication token (Bearer). Generate in: My Account → Security → Tokens."
},
{
"name": "SONARQUBE_SSL_VERIFY",
"format": "string",
"default": "true",
"description": "Verify SSL certificates (true/false). Set to 'false' for self-signed certs."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"sonarqube-mcp-mcp": {
"command": "uvx",
"args": [
"sonarqube-mcp==0.1.0"
],
"env": {
"SONARQUBE_URL": "<YOUR_SONARQUBE_URL>",
"SONARQUBE_TOKEN": "<YOUR_SONARQUBE_TOKEN>",
"SONARQUBE_SSL_VERIFY": "<YOUR_SONARQUBE_SSL_VERIFY>"
}
}
}
}Cline
{
"mcpServers": {
"sonarqube-mcp-mcp": {
"command": "uvx",
"args": [
"sonarqube-mcp==0.1.0"
],
"env": {
"SONARQUBE_URL": "<YOUR_SONARQUBE_URL>",
"SONARQUBE_TOKEN": "<YOUR_SONARQUBE_TOKEN>",
"SONARQUBE_SSL_VERIFY": "<YOUR_SONARQUBE_SSL_VERIFY>"
}
}
}
}VS Code
{
"servers": {
"sonarqube-mcp-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"sonarqube-mcp==0.1.0"
],
"env": {
"SONARQUBE_URL": "<YOUR_SONARQUBE_URL>",
"SONARQUBE_TOKEN": "<YOUR_SONARQUBE_TOKEN>",
"SONARQUBE_SSL_VERIFY": "<YOUR_SONARQUBE_SSL_VERIFY>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"sonarqube-mcp-mcp": {
"command": "uvx",
"args": [
"sonarqube-mcp==0.1.0"
],
"env": {
"SONARQUBE_URL": "<YOUR_SONARQUBE_URL>",
"SONARQUBE_TOKEN": "<YOUR_SONARQUBE_TOKEN>",
"SONARQUBE_SSL_VERIFY": "<YOUR_SONARQUBE_SSL_VERIFY>"
}
}
}
}Let your agent find its tools
Find servers like SonarQube MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.