Comparison

appknox vs SonarQube MCP Server

appknox is no longer listed on any marketplace we read: these are its last known data, as of 2026‑10‑15.

appknox is a plugin bundle for AI coding tools published by Appknox. No marketplace we read lists it any more. SonarQube MCP Server is an MCP server published by SonarSource. Marketplaces we read that list it: 2 (Official MCP Registry, Docker MCP Catalog). As of our marketplace pass on 2026-10-24. A plugin in this pair is no longer listed on any marketplace we read, so search engines are asked not to index the page.

Where each is published

Where each is published
Marketplace	appknox	SonarQube MCP Server
Community marketplace appknox/appknox-mcp	Removed on 2026-10-15 Version: 0.1.0 Forks (GitHub): 0 Stars (GitHub): 0 Not marked · First seen 2026-10-14	Not listed
Official MCP Registry	Not listed	Listed Version: 1.30.0 Forks (GitHub): 104 Stars (GitHub): 670 Not marked · First seen 2026-10-11
Docker MCP Catalog	Not listed	Listed Version: sha256:925c88bc7cab Forks (GitHub): 104 Pulls (Docker Hub): 1 580 414 Stars (Docker Hub): 23 Stars (GitHub): 670 Not marked · First seen 2026-10-11

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

appknox vs SonarQube MCP Server
Fact	appknoxno longer listed · 2026-10-15	SonarQube MCP Server
Marketplaces that list it (differs)	0	2
Stars (GitHub) (differs)	0	670
Pulls (Docker Hub) (differs)	No figure on Docker Hub	1 580 414
Forks (GitHub) (differs)	0	104
Last release (differs)	Not published	2026-10-23
Where it runs (differs)	Installs as a plugin bundle	On your machine (docker.io/sonarsource/sonarqube-mcp)
Transport (differs)	Not stated	stdio
Tools it declares (differs)	Not published	25
Environment variables it asks for (differs)	2, secrets among them: 1	3, secrets among them: 3
Parts of the bundle (differs)	6	Not a bundle
Licence (differs)	Not stated	NOASSERTION
Repository (differs)	github.com/appknox/appknox-mcp	github.com/sonarsource/sonarqube-mcp-server
Changes in the last 7 days (differs)	0	1
First seen (differs)	2026-10-14	2026-10-11

Lines where the two differ have a tinted background and bold values. No value is marked better or worse: a plugin no marketplace lists any more is shown with its last known data, which we do not rank against current figures.

What to use instead of appknox

Plugins still listed whose own names, descriptions, tools and skills are closest in meaning to it. Comparable, not endorsed.

Beagle Security

Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…

by beaglesecurity · MCP server

Listed on: Docker MCP Catalog · Describes nearly the same job
stackhawk-api

Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…

by stackhawk · Plugin bundle

Listed on: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins, Community GitHub marketplaces · Describes nearly the same job
Snyk API & Web MCP Server

MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage

by snyk · MCP server

Listed on: Official MCP Registry · Describes nearly the same job
Codex Security

Codex Security workflows for security scans, analysis, and investigation.

by OpenAI · Plugin bundle

Listed on: Codex: openai-curated (openai/plugins) · Describes nearly the same job
Endor Labs Agent Kit

Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

by endorlabs · Plugin bundle

Listed on: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Describes nearly the same job
Scout Security

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

by Varpost · MCP server

Listed on: Official MCP Registry · Describes nearly the same job

Its card, with similar plugins by marketplace

What each says it does

appknox

In its own words, on Community GitHub marketplaces:

Appknox KnoxIQ fix-and-verify: fetch the vulnerabilities Appknox found in your app, fix them in your repo, verify with the finding's PoC, and re-scan.

SonarQube MCP Server

In its own words, on Official MCP Registry:

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

How to run each

appknox

No data for an automatic command: what its marketplaces declare does not say unambiguously how to connect it.

SonarQube MCP Server As a local MCP server: Docker image

Claude Code

claude mcp add --env "SONARQUBE_ORG=<YOUR_SONARQUBE_ORG>" --env "SONARQUBE_TOKEN=<YOUR_SONARQUBE_TOKEN>" --env "SONARQUBE_URL=<YOUR_SONARQUBE_URL>" --transport stdio sonarqube-mcp-server -- docker run -i --rm -e SONARQUBE_ORG -e SONARQUBE_TOKEN -e SONARQUBE_URL docker.io/sonarsource/sonarqube-mcp

Requires: SONARQUBE_ORG (secret), SONARQUBE_TOKEN (secret), SONARQUBE_URL (secret)

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Tools each declares

The marketplaces of appknox publish no list of tools, so we do not compare tools.

Settings each asks for

Only appknox asks for

APPKNOX_ACCESS_TOKEN (secret)
APPKNOX_BASE_URL

Only SonarQube MCP Server asks for

SONARQUBE_ORG (secret)
SONARQUBE_TOKEN (secret)
SONARQUBE_URL (secret)

Settings as each marketplace publishes them. Asking for fewer is not better in itself.

What it can do: appknox · What it can do: SonarQube MCP Server · Compare two other plugins

Data comes from public marketplace files in GitHub repositories of their authors. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Figures come from our own regular passes over the marketplaces, last read on 2026-10-24. We publish no contact details for plugin publishers.