
Sonarqube Mcp
Connects Claude to any SonarQube 9.x/10.x instance or SonarCloud over the Web API to surface code quality data during triage. Five read-only tools: list projects, pull metrics (coverage, bugs, code smells, ratings), check Quality Gate status, search issues by severity and type, and rank projects by worst metric value across your entire organization. That last one is the standout. Instead of checking repositories one at a time, you can ask for the ten services with the lowest test coverage or the most critical vulnerabilities in a single call. Built on FastMCP with Pydantic validation on every input. Useful when you're prioritizing technical debt or preparing sprint planning and want an LLM to query your SonarQube instance directly.
- tools
- 5
- auth
- Secret needed
- transport
- STDIO
- env vars
- 3
- last updated
- Apr 18, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
sonarqube_list_projectsPaginated project search with optional text filter
Paginated project search with optional text filter
No parameter schema in public metadata yet.
sonarqube_project_metricsMeasures for one project (default set covers bugs / coverage / smells / ratings / ncloc / tests / alert_status)
Measures for one project (default set covers bugs / coverage / smells / ratings / ncloc / tests / alert_status)
No parameter schema in public metadata yet.
sonarqube_quality_gate_statusQuality Gate status + per-condition failures
Quality Gate status + per-condition failures
No parameter schema in public metadata yet.
sonarqube_get_issuesIssue search filtered by severity / type / resolution status
Issue search filtered by severity / type / resolution status
No parameter schema in public metadata yet.
sonarqube_worst_metricsTop-N projects sorted by the worst value of a metric (e.g. worst coverage, most bugs)
Top-N projects sorted by the worst value of a metric (e.g. worst coverage, most bugs)
No parameter schema in public metadata yet.
Sponsors
Configuration
SONARQUBE_URL*SonarQube URL (e.g. https://sonar.example.com or https://sonarcloud.io)
SONARQUBE_TOKEN*secretSonarQube authentication token (Bearer). Generate in: My Account → Security → Tokens.
SONARQUBE_SSL_VERIFYdefault: trueVerify SSL certificates (true/false). Set to 'false' for self-signed certs.
Readme
sonarqube-mcp
MCP server for SonarQube. Lets an LLM agent (Claude Code, Cursor, OpenCode, etc.) discover projects, pull headline metrics, check Quality Gate status, search issues with severity/type filters, and rank projects by the worst value of any metric.
Python, FastMCP, stdio transport.
Works with any SonarQube 9.x / 10.x instance (self-hosted) and with SonarCloud.
Why another SonarQube MCP?
Details
- Repository
- github.com/mshegolev/sonarqube-mcp
- Categories
- Developer Tools, Monitoring & Observability
- Package
sonarqube-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active