🛡️ SonarQube MCP Server

✨ Features

| Tool | Description | |------|-------------| | sq_list_projects | List projects with quality status | | sq_get_project | Detailed project overview with metrics | | sq_search_issues | Search bugs, vulnerabilities & code smells | | sq_get_issue | Full issue details with context | | sq_get_quality_gate | Quality gate pass/fail status & conditions | | sq_search_hotspots | Find security hotspots needing review | | sq_get_hotspot | Security hotspot details & remediation | | sq_get_measures | Code quality metrics for any project | | sq_get_measures_history | Track metric trends over time | | sq_get_rule | Rule details & remediation guidance | | sq_search_rules | Search rules by language, type, severity | | sq_get_component_tree | File tree with metrics to find problems |

🔧 Built-in Capabilities

• LRU caching with configurable TTL and size limits
• Bearer token authentication
• Zod schema validation on all tool inputs
• Rich formatted output — severity icons, progress bars, sparklines
• SonarCloud support — optional organization parameter
• Configurable timeouts and page sizes

📦 Installation

npm install -g sonarcube-mcp-server

Or use directly with npx:

npx sonarcube-mcp-server

⚙️ Configuration

The server reads configuration from environment variables:

| Variable | Required | Default | Description | |----------|----------|---------|-------------| | SONAR_MCP_BASE_URL | ✅ | — | SonarQube/SonarCloud base URL | | SONAR_MCP_TOKEN | ✅ | — | Authentication token | | SONAR_MCP_ORGANIZATION | ❌ | — | SonarCloud organization key | | SONAR_MCP_DEFAULT_PROJECT | ❌ | — | Default project key | | SONAR_MCP_CACHE_TTL_MS | ❌ | 300000 | Cache TTL (milliseconds) | | SONAR_MCP_CACHE_MAX_SIZE | ❌ | 100 | Max cached responses | | SONAR_MCP_TIMEOUT_MS | ❌ | 15000 | HTTP request timeout (ms) | | SONAR_MCP_PAGE_SIZE | ❌ | 100 | Default API page size |

Quick Start

export SONAR_MCP_BASE_URL="https://sonarcloud.io"
export SONAR_MCP_TOKEN="squ_your_token_here"
sonarcube-mcp-server

MCP Client Configuration

Add to your MCP client config (e.g. Claude Desktop, Cursor):

{
  "mcpServers": {
    "sonarqube": {
      "command": "npx",
      "args": ["sonarcube-mcp-server"],
      "env": {
        "SONAR_MCP_BASE_URL": "https://sonarcloud.io",
        "SONAR_MCP_TOKEN": "squ_your_token_here"
      }
    }
  }
}

📄 License

MIT © bhayanak