MCP server
SonarQube MCP server
Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.
★ 672pushed 2026-10-23
Needs SONARQUBE_TOKEN (replace the ... with your value).
Run in a terminal. Everything after -- is the command that starts the server. docs
claude mcp add --transport stdio --env SONARQUBE_TOKEN=... sonarqube -- docker run -i --rm -e SONARQUBE_TOKEN docker.io/sonarsource/sonarqube-mcp
Claude Desktop only: Settings > Developer > Edit Config opens claude_desktop_config.json. Add this, save and restart the app. docs
{
"mcpServers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"sonarqube": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Run codex mcp add --env SONARQUBE_TOKEN=... sonarqube -- docker run -i --rm -e SONARQUBE_TOKEN docker.io/sonarsource/sonarqube-mcp, or add this to ~/.codex/config.toml. docs
[mcp_servers.sonarqube] command = "docker" args = ["run", "-i", "--rm", "-e", "SONARQUBE_TOKEN", "docker.io/sonarsource/sonarqube-mcp"] [mcp_servers.sonarqube.env] SONARQUBE_TOKEN = "..."
Run in a terminal (-s user adds it for all projects; the default is this project). docs
gemini mcp add -s user -e SONARQUBE_TOKEN=... sonarqube docker -- run -i --rm -e SONARQUBE_TOKEN docker.io/sonarsource/sonarqube-mcp
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add --env SONARQUBE_TOKEN=... sonarqube -- docker run -i --rm -e SONARQUBE_TOKEN docker.io/sonarsource/sonarqube-mcp
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"sonarqube": {
"type": "local",
"command": [
"docker",
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"enabled": true,
"environment": {
"SONARQUBE_TOKEN": "..."
}
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"sonarqube": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SONARQUBE_TOKEN",
"docker.io/sonarsource/sonarqube-mcp"
],
"env": {
"SONARQUBE_TOKEN": "..."
}
}
}
}FAQ
Is there an official SonarQube MCP server?+
Yes: SonarQube, maintained by Sonar.
How do I connect SonarQube to Claude?+
In Claude Code, run the claude mcp add command shown above. In Claude Desktop, add the server to claude_desktop_config.json (Settings > Developer > Edit Config) and restart the app.
How do I use the SonarQube MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab on the server above: it has the exact mcp.json entry and a one-click install link. The same server also works in Claude Code, Claude Desktop / claude.ai, ChatGPT, Cursor, VS Code and Codex.
Is it safe to give an AI agent access to SonarQube?+
Start with the official server, a read-only or test account and approval prompts on for anything that writes. Content the agent reads from SonarQube (tickets, messages, pages) can carry prompt-injection instructions, so don't auto-approve actions.
All security MCP servers · Agent skills · How MCP setup works in each client
MCP servers for similar apps: 1Password · Auth0 · Burp Suite · Clerk · Ghidra · HashiCorp Vault · npm · Okta · PyPI · Snyk · Socket · Trivy · WorkOS