Ext Ops Panel
Open dashboard
Comparison

claude-crap vs SonarQube MCP Server

claude-crap is a plugin bundle for AI coding tools published by ahernandez-developer. Marketplaces we read that list it: 2 (Claude Code: claude-plugins-community, Community GitHub marketplaces). SonarQube MCP Server is an MCP server published by SonarSource. Marketplaces we read that list it: 2 (Official MCP Registry, Docker MCP Catalog). As of our marketplace pass on 2026-10-15. This pair was picked by a reader, not by our comparison rule, so search engines are asked not to index the page.

Where each is published

Where each is published
Marketplaceclaude-crapSonarQube MCP Server
Claude Code: claude-plugins-community Listed
Version: 0.4.8
Forks (GitHub): 4
Stars (GitHub): 9
Not marked · First seen
Not listed
Official MCP Registry Not listed Listed
Version: 1.21.0
Forks (GitHub): 103
Stars (GitHub): 664
Not marked · First seen
Docker MCP Catalog Not listed Listed
Version: sha256:925c88bc7cab
Forks (GitHub): 103
Pulls (Docker Hub): 1 517 308
Stars (Docker Hub): 23
Stars (GitHub): 664
Not marked · First seen

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

claude-crap vs SonarQube MCP Server
Factclaude-crapSonarQube MCP Server
Marketplaces that list it22
Stars (GitHub) (differs)9 (worse)664 (better)
Pulls (Docker Hub) (differs)No figure on Docker Hub1 517 308
Forks (GitHub) (differs)4 (worse)103 (better)
Last releaseNot publishedNot published
Where it runs (differs)Installs as a plugin bundleOn your machine (docker.io/sonarsource/sonarqube-mcp)
Transport (differs)Not statedstdio
Tools it declares (differs)Not published25
Environment variables it asks for (differs)1, secrets among them: 03, secrets among them: 3
Hooks it runs (differs)5Not published
Parts of the bundle (differs)10Not a bundle
Licence (differs)MITNOASSERTION
Repository (differs)github.com/ahernandez-developer/claude-crapgithub.com/sonarsource/sonarqube-mcp-server
Changes in the last 7 days (differs)20
First seen2026-10-112026-10-11

Lines where the two differ have a tinted background and bold values. Where the data itself says which value is better (more marketplaces, a larger figure of the same marketplace, a fresher release, a verified mark on a marketplace that lists both), the better one is also marked green with ▲ and the worse one red with ▼. Where it runs, the transport, the tools, the settings, hooks, the bundle's parts, the licence and the week's changes are marked only as different: more or fewer is not better in itself.

What each says it does

claude-crap

In its own words, on Claude Code: claude-plugins-community:

Deterministic Quality Assurance plugin for Claude Code. CRAP stands for Change Risk Anti-Patterns — a metric originally developed by Alberto Savoia and Bob Evans at Google in 2007 to identify code that is both complex and under-tested. Inspired by their work. Claude-crap wraps every Write, Edit, and Bash tool call with a PreToolUse gatekeeper, a PostToolUse verifier, and a Stop quality gate backed by the CRAP index, Technical Debt Ratio, tree-sitter AST metrics, and SARIF 2.1.0 reports. Auto-detects and runs ESLint, Semgrep, Bandit, and Stryker at boot so users get real A..E quality grades out of the box. Forbids the agent from writing functional code before a test safety net exists (the Golden Rule).

SonarQube MCP Server

In its own words, on Official MCP Registry:

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

How to run each

claude-crap As a Claude Code plugin

Claude Code
/plugin marketplace add anthropics/claude-plugins-community
/plugin install claude-crap@claude-community

SonarQube MCP Server As a local MCP server: Docker image

Claude Code
claude mcp add --env "SONARQUBE_ORG=<YOUR_SONARQUBE_ORG>" --env "SONARQUBE_TOKEN=<YOUR_SONARQUBE_TOKEN>" --env "SONARQUBE_URL=<YOUR_SONARQUBE_URL>" --transport stdio sonarqube-mcp-server -- docker run -i --rm -e SONARQUBE_ORG -e SONARQUBE_TOKEN -e SONARQUBE_URL docker.io/sonarsource/sonarqube-mcp

Requires: SONARQUBE_ORG (secret), SONARQUBE_TOKEN (secret), SONARQUBE_URL (secret)

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Tools each declares

The marketplaces of claude-crap publish no list of tools, so we do not compare tools.

Settings each asks for

Only claude-crap asks for

  • NODE_ENV

Only SonarQube MCP Server asks for

  • SONARQUBE_ORG (secret)
  • SONARQUBE_TOKEN (secret)
  • SONARQUBE_URL (secret)

Settings as each marketplace publishes them. Asking for fewer is not better in itself.

What it can do: claude-crap · What it can do: SonarQube MCP Server · Compare two other plugins

Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-community/blob/HEAD/.claude-plugin/marketplace.json. Data comes from public marketplace files in GitHub repositories of their authors. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.

Where the data comes from: how the catalog is built