SonarSource/sonarqube-mcp-server

What it solves

This project provides a bridge between AI agents and SonarQube (Server or Cloud), allowing AI assistants to access code quality and security analysis data. It solves the problem of AI agents lacking real-time, professional-grade static analysis and security vulnerability data when suggesting code changes or reviewing code.

How it works

It implements the Model Context Protocol (MCP), acting as a server that AI agent clients (like Claude, Cursor, or VS Code) can connect to. Once connected, the agent can query SonarQube for project analysis results or analyze specific code snippets directly within the agent's context.

Who it’s for

Developers and teams using SonarQube for code quality and security who want to integrate these insights directly into their AI-powered coding assistants.

Highlights

• Broad Client Support: Ready-to-use configurations for Claude Code, Cursor, VS Code, Windsurf, Zed, and GitHub Copilot.
• Flexible Deployment: Can be run as a Docker container for easy setup and reproducibility.
• Cloud & Server Support: Works with both SonarQube Cloud (including US region) and self-hosted SonarQube Server instances.
• IDE Integration: Can integrate with SonarQube for IDE to enhance the analysis workflow.