Comparison

Draugr vs SonarQube MCP Server

Draugr is no longer listed on any marketplace we read: these are its last known data, as of 2026‑10‑22.

Draugr is a plugin bundle for AI coding tools published by Draugr. No marketplace we read lists it any more. SonarQube MCP Server is an MCP server published by SonarSource. Marketplaces we read that list it: 2 (Official MCP Registry, Docker MCP Catalog). As of our marketplace pass on 2026-10-29. A plugin in this pair is no longer listed on any marketplace we read, so search engines are asked not to index the page.

Where each is published

Where each is published
Marketplace	Draugr	SonarQube MCP Server
Community marketplace draugr-dev/draugr	Removed on 2026-10-22 Version: 0.154.1 Forks (GitHub): 1 Stars (GitHub): 7 Not marked · First seen 2026-10-13	Not listed
Official MCP Registry	Not listed	Listed Version: 1.30.0 Forks (GitHub): 102 Stars (GitHub): 675 Not marked · First seen 2026-10-11
Docker MCP Catalog	Not listed	Listed Version: sha256:925c88bc7cab Forks (GitHub): 102 Pulls (Docker Hub): 1 614 678 Stars (Docker Hub): 23 Stars (GitHub): 675 Not marked · First seen 2026-10-11

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

Draugr vs SonarQube MCP Server
Fact	Draugrno longer listed · 2026-10-22	SonarQube MCP Server
Marketplaces that list it (differs)	0	2
Stars (GitHub) (differs)	7	675
Pulls (Docker Hub) (differs)	No figure on Docker Hub	1 614 678
Forks (GitHub) (differs)	1	102
Last release (differs)	Not published	2026-10-23
Where it runs (differs)	Installs as a plugin bundle	On your machine (docker.io/sonarsource/sonarqube-mcp)
Transport (differs)	Not stated	stdio
Tools it declares (differs)	Not published	25
Environment variables it asks for (differs)	Not published	3, secrets among them: 3
Hooks it runs (differs)	1	Not published
Parts of the bundle (differs)	2	Not a bundle
Licence (differs)	Apache-2.0	NOASSERTION
Repository (differs)	github.com/draugr-dev/draugr	github.com/sonarsource/sonarqube-mcp-server
Changes in the last 7 days (differs)	0	1
First seen (differs)	2026-10-13	2026-10-11

Lines where the two differ have a tinted background and bold values. No value is marked better or worse: a plugin no marketplace lists any more is shown with its last known data, which we do not rank against current figures.

What to use instead of Draugr

Plugins still listed whose own names, descriptions, tools and skills are closest in meaning to it. Comparable, not endorsed.

oh-my-secuaudit

Security audit skill collection — SAST, DAST, external software analysis, architecture review, dataflow clustering, assessment-as-code methodology

by windshock · Plugin bundle

Listed on: Claude Code: claude-plugins-community · Describes nearly the same job
secure-sdlc-agents

A team of 8 AI security specialists embedded in your coding workflow — covering every phase of the Software Development Lifecycle. Includes AppSec Engineer, GRC Analyst…

by Kaademos · Plugin bundle

Listed on: Claude Code: claude-plugins-community · Describes nearly the same job
AgentGuard — security checks for AI agents

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

by shuaicongxiaomai · MCP server

Listed on: Official MCP Registry · Describes nearly the same job
Endor Labs Agent Kit

Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

by endorlabs · Plugin bundle

Listed on: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Describes nearly the same job
Gadriel AI Security Harness

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

by Gadriel-ai · MCP server

Listed on: Official MCP Registry · Describes nearly the same job
SafeWeave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

by safeweave.dev · MCP server

Listed on: Official MCP Registry · Describes nearly the same job

Its card, with similar plugins by marketplace

What each says it does

Draugr

In its own words, on Community GitHub marketplaces:

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

SonarQube MCP Server

In its own words, on Official MCP Registry:

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

How to run each

Draugr

No data for an automatic command: what its marketplaces declare does not say unambiguously how to connect it.

SonarQube MCP Server As a local MCP server: Docker image

Claude Code

claude mcp add --env "SONARQUBE_ORG=<YOUR_SONARQUBE_ORG>" --env "SONARQUBE_TOKEN=<YOUR_SONARQUBE_TOKEN>" --env "SONARQUBE_URL=<YOUR_SONARQUBE_URL>" --transport stdio sonarqube-mcp-server -- docker run -i --rm -e SONARQUBE_ORG -e SONARQUBE_TOKEN -e SONARQUBE_URL docker.io/sonarsource/sonarqube-mcp

Requires: SONARQUBE_ORG (secret), SONARQUBE_TOKEN (secret), SONARQUBE_URL (secret)

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Tools each declares

The marketplaces of Draugr publish no list of tools, so we do not compare tools.

Settings each asks for

The marketplaces of Draugr publish no settings it asks for, so we do not compare settings.

What it can do: Draugr · What it can do: SonarQube MCP Server · Compare two other plugins

Data comes from public marketplace files in GitHub repositories of their authors. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Figures come from our own regular passes over the marketplaces, last read on 2026-10-29. We publish no contact details for plugin publishers.