SonarSource · Official

SonarQube MCP server

Check code quality and security issues with SonarQube Server or Cloud.

Verified publisher namespaceLocalSecurity & code quality
Registry name
io.github.SonarSource/sonarqube-mcp-server
Latest version
1.21.0 · updated 2026-06-25
Links
Vendor docsSource

Install

Commands are generated from the registry record. Remote servers usually ask you to sign in with OAuth on first use.

Step-by-step guides

Claude Code

claude mcp add sonarqube -- docker run -i --rm docker.io/sonarsource/sonarqube-mcp

Codex

# ~/.codex/config.toml
[mcp_servers.sonarqube]
command = "docker"
args = ["run", "-i", "--rm", "docker.io/sonarsource/sonarqube-mcp"]

Gemini CLI

gemini mcp add sonarqube docker run -i --rm docker.io/sonarsource/sonarqube-mcp

Cursor

{
  "mcpServers": {
    "sonarqube": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/sonarsource/sonarqube-mcp"
      ]
    }
  }
}

VS Code (GitHub Copilot)

code --add-mcp '{"name":"sonarqube","command":"docker","args":["run","-i","--rm","docker.io/sonarsource/sonarqube-mcp"]}'

Packages

  • oci docker.io/sonarsource/sonarqube-mcp

More security & code quality

Snyk

Reviewed Oct 5, 2026. Official means published under SonarSource's namespace in the MCP registry. It is not a security audit.