TL;DR
SonarQube is a Security MCP server that lets Claude Code, Cursor, Windsurf and any MCP-compatible AI agent seamless integration with SonarQube for code quality analysis, bugs, and security vulnerabilities. Install in 1 minute with mcpizy install sonarqube.
SonarQube
Security
Seamless integration with SonarQube for code quality analysis, bugs, and security vulnerabilities.
Repo audit: 70/100 — usable, but maintenance or documentation is thin
Scored on licence, adoption, maintenance and documentation of SonarSource/sonarqube-mcp-server. We show the grade whether it flatters the server or not.
last commit 2 days ago · 631 stars · no licence declared · 18 open issues
Read the full audit on CheckMCPInstall SonarQube
mcpizy install sonarqubeWe could not verify a published package or a reachable endpoint for this server, so we are not showing an install command that would fail. Checked 2026-08-11. Follow the repository's own instructions instead.
Works with
More Security MCPs
RAD Security
AI-powered security insights for Kubernetes and cloud workloads. Threat detection.
1Password
Manage 1Password vaults, items, and secrets from AI agents via the Model Context Protocol.
Auth0
Manage Auth0 tenants, users, roles, and applications from AI agents via MCP.
Okta
Manage Okta users, groups, and application assignments for identity from AI agents.
Alternatives to SonarQube
If SonarQube doesn't fit your stack, these Security MCP servers solve similar problems.
Frequently asked questions
What is the SonarQube MCP server?
SonarQube is listed as an Security Model Context Protocol server whose documented purpose is to let an MCP-compatible agent seamless integration with SonarQube for code quality analysis, bugs, and security vulnerabilities. Client support, permissions and authentication remain specific to the upstream project.
How do I install SonarQube MCP with Claude Code?
The fastest way is the MCPizy CLI: run `mcpizy install sonarqube` and MCPizy will add the server to your `.claude.json` automatically. You can also install it manually by adding an entry under `mcpServers` in `.claude.json` with the command `` and restarting Claude Code.
Does MCPizy charge to view or install SonarQube MCP?
No. Reading this profile and copying its install guidance is free. Upstream software, API, account or usage costs are separate, and licence coverage should be checked from the linked source when available.
Does SonarQube MCP work with Cursor and Windsurf?
The MCP standard is supported by those clients, but a specific server can still have client-specific setup or transport limits. Use the configuration shown on this page when present and verify the upstream instructions before installation.
What can I do with SonarQube MCP?
Its documented purpose is to let an MCP-compatible agent seamless integration with SonarQube for code quality analysis, bugs, and security vulnerabilities. The exact tools, permissions and write capabilities depend on the server version and configuration shown by the upstream project.
Compare before you commit
Put this server beside an alternative, or return to the full evidence directory.
Compare MCP serversBack to directory