Sonarqube MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/mshegolev-sonarqube-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 0 write · 0 deleteRead-only

Secrets

1 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Python package

Tools (5)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• sonarqube_get_issuesGet Issuesread-only

  Search issues for a SonarQube project. Wraps ``/api/issues/search``. Use the filter parameters to narrow results — e.g. ``severities=['BLOCKER','CRITICAL']`` for triage, or ``types=['VULNERABILITY']`` for a security sweep. Pagination: if ``has_more`` is ``True``, call again with ``page + 1``. SonarQube caps total pagination at 10 000 issues; tighten the filters if you need to go deeper. Examples: - Use when: "Triage top BLOCKER / CRITICAL bugs in `einvy:aut_einvy`" → ``severities=['BLOCKER','CRITICAL']``, ``types=['BUG']``. - Use when: "Security sweep on the PR" → ``type…

• sonarqube_list_projectsList Projectsread-only

  List SonarQube projects (components with qualifier ``TRK``). Use this first to discover which project keys exist before calling ``sonarqube_project_metrics`` or ``sonarqube_get_issues``. Pagination: if ``has_more`` is ``True``, call again with ``page + 1``. Results are sorted by SonarQube default order (component name ascending). Examples: - Use when: "What SonarQube projects contain 'backend' in the name?" → ``query='backend'``, default pagination. - Use when: The user gives a project name but not its key. - Don't use when: You already have the project key and only need i…

• sonarqube_project_metricsProject Metricsread-only

  Fetch measures for a single project. Wraps ``/api/measures/component``. Returns both the raw list (``measures``) and a dict keyed by metric name (``measures_by_metric``) — handy when the agent wants to look up a single value quickly. To find valid metric keys, call with the default set first — SonarQube ignores unknown metric keys and returns what it knows. Examples: - Use when: "What's the code coverage of `einvy:aut_einvy`?" → ``project_key='einvy:aut_einvy'``, default ``metric_keys``. - Use when: "Coverage on the `feature/new-auth` branch?" → add ``branch='feature/new…

• sonarqube_quality_gate_statusQuality Gate Statusread-only

  Fetch the Quality Gate status for a project. Wraps ``/api/qualitygates/project_status``. Returns the overall status (``OK`` / ``WARN`` / ``ERROR`` / ``NONE``) plus a per-condition breakdown — exactly what's needed for "why is my QG failing?" or "is PR #42 passing the gate?" queries. ``NONE`` means the project exists but has no Quality Gate attached or no analysis yet. Examples: - Use when: "Is `einvy:aut_einvy` passing its Quality Gate?" → ``project_key='einvy:aut_einvy'``. - Use when: "Which conditions fail on PR #42?" → ``project_key=...``, ``pull_request='42'``. -…

• sonarqube_worst_metricsWorst Metrics Rankingread-only

  Rank projects by the worst value of a single metric. Algorithm: 1. Pull up to ``candidate_pool`` projects (optionally filtered by ``query``). 2. Bulk-fetch ``metric`` for all of them in one ``/api/measures/search`` call. 3. Sort descending or ascending depending on whether higher is worse (e.g. bugs → descending, coverage → ascending). 4. Return the top ``limit``. For fine-grained metrics (``bugs``, ``vulnerabilities``, ``code_smells``, ratings, ``duplicated_lines_density``, ``open_issues``) higher is worse. For ``coverage``, ``tests``, ``line_coverage``, ``branch_coverage`` — lower is wo…

Signals

Stars

0

Forks

0

Open issues

0

Weekly downloads

56

Last commit

Aug 12, 2026 (2 months ago)

Last release

May 2, 2026 (5 months ago)

Last package publish

Aug 10, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.mshegolev/sonarqube-mcp

Version

0.1.0

Auth

API key

Packages

pypi sonarqube-mcp

License

MIT

Repository

github.com/mshegolev/sonarqube-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql