SonarQube MCP Server

docker run --init -i --rm -e SONARQUBE_TOKEN -e SONARQUBE_ORG sonarsource/sonarqube-mcp

{
  "mcpServers": {
    "sonarqube-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--init",
        "-i",
        "--rm",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "SONARQUBE_ORG",
        "sonarsource/sonarqube-mcp"
      ]
    }
  }
}

Connects a SonarQube Cloud or Server instance so an assistant can analyse a snippet or a set of files, list open issues and security hotspots, check quality gate status, and look at coverage and dependency risk. Tools are grouped into toolsets so a client can enable only the parts it needs. Runs as a Docker image or a Java 21 jar, authenticated with a SonarQube token. Note the license is source-available, not open source.