sonarsource/sonarqube-mcp repository overview

⁠SonarQube MCP Server

Official container image for the SonarQube MCP Server — a Model Context Protocol (MCP) server that connects AI coding assistants to SonarQube Cloud, SonarQube Server, and SonarQube Community Build.

⁠What is this?

Bring code quality and security analysis into your AI workflow. Search issues, check quality gates, analyze code snippets, review coverage, and investigate dependency risks — directly from tools like Cursor, Claude, Copilot, VS Code, and Windsurf.

⁠Quick start

SonarQube Cloud

docker run --init --pull=always -i --rm \
  -e SONARQUBE_TOKEN \
  -e SONARQUBE_ORG \
  sonarsource/sonarqube-mcp

SonarQube Server

docker run --init --pull=always -i --rm \
  -e SONARQUBE_TOKEN \
  -e SONARQUBE_URL \
  sonarsource/sonarqube-mcp

For SonarQube Cloud US, add -e SONARQUBE_URL=https://sonarqube.us.

⁠Configuration

• SONARQUBE_TOKEN — SonarQube user token (required)
• SONARQUBE_ORG — Organization key (SonarQube Cloud)
• SONARQUBE_URL — Server URL (SonarQube Server / Community Build, or Cloud US)
• SONARQUBE_TOOLSETS — Comma-separated list of toolsets to enable
• SONARQUBE_READ_ONLY — Set to true to disable write operations

Use latest for automatic updates, or pin to a version tag (e.g. 1.21.0.2975) for reproducible deployments.

⁠Links

• GitHub repository⁠
• Configuration generator⁠
• Documentation⁠