SonarQube MCP Server

The SonarQube MCP Server is a Model Context Protocol (MCP) server that enables seamless integration with SonarQube Server or Cloud for code quality and security.

People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Java.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 632 · #49 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

NOASSERTION · Java · how we verify → /methodology

01 · Install SonarQube MCP Server

before you install - you'll need

Set SONARQUBE_TOKEN, SONARQUBE_ORG, SONARQUBE_READ_ONLY before connecting. SONARQUBE_URL, SONARQUBE_IDE_PORT, SONARQUBE_TOOLSETS are optional or environment-specific per the README.

Docker

docker run -i --rm docker.io/sonarsource/sonarqube-mcp

Claude Desktop - add to config

{
  "mcpServers": {
    "sonarsource-sonarqube-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/sonarsource/sonarqube-mcp"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license no standard license detected - usage rights unclear; check the repo before commercial use

registry namespace io.github.SonarSource is GitHub-verified and matches the repo owner

03 · What SonarQube MCP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

1.25.0.3221 · 2026-08-18

SonarQube MCP Server v1.25.0 · This release introduces the new vortex and ide toolsets for Vortex-enabled organizations, deprecates analyze_code_snippet in that context, and fixes an HTTPS liveness probe failure on…

1.24.0.3152 · 2026-08-04

SonarQube MCP Server v1.24.0 · This release improves the analyze_file_list tool by exposing rule keys in its output, making it easier for AI agents to look up further rule details after an analysis. · analyze_file_list…

1.23.0.3101 · 2026-07-20

SonarQube MCP Server v1.23.0 · This release simplifies SonarQube Cloud setup with auto-detected organizations, expands branch visibility for AI agents, adds mTLS client certificate support, and fixes inconsistent tool…

04 · Who maintains SonarQube MCP Server

SonarQube MCP Server is maintained by sonarsource. It's the only MCP server we track from this author; the repo dates to Apr 2025.

05 · Facts

repository: github.com/sonarsource/sonarqube-mcp-server
category: security - ranked #49 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 7 releases in the last 90 days (latest 2026-08-18)
registry: io.github.SonarSource/sonarqube-mcp-server (active, first published 2025-09-19 · 12 versions)
packages: oci:docker.io/sonarsource/sonarqube-mcp

06 · SonarQube MCP Server FAQ

What is SonarQube MCP Server?

The SonarQube MCP Server is a Model Context Protocol (MCP) server that enables seamless integration with SonarQube Server or Cloud for code quality and security.

Is SonarQube MCP Server still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 7 releases in the last 90 days. We re-verify nightly.

How do I install SonarQube MCP Server?

Run `docker run -i --rm docker.io/sonarsource/sonarqube-mcp`. The README documents 6 environment variables (SONARQUBE_TOKEN, SONARQUBE_ORG, SONARQUBE_URL…) to set first. Set SONARQUBE_TOKEN, SONARQUBE_ORG, SONARQUBE_READ_ONLY before connecting. SONARQUBE_URL, SONARQUBE_IDE_PORT, SONARQUBE_TOOLSETS are optional or environment-specific per the README. You can also paste the ready-made client config above.

07 · Alternatives to SonarQube MCP Server

Alternatives to SonarQube MCP Server

Maintained security servers if SonarQube MCP Server isn't the fit.

Pairs well with

Servers that cover what SonarQube MCP Server doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Dependency Management MCP Server · Interactive Leetcode MCP · Stackhawk · Starlog · Code Inspectus