Ext Ops Panel
Abrir o painel

SonarQube MCP Server

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

Servidor MCP · de SonarSource

Conectar Comparar Reivindicar

Resumo

SonarQube MCP Server é um servidor MCP publicado por SonarSource. Marketplaces que lemos e que o listam: 2 (Official MCP Registry, Docker MCP Catalog). A última mudança que registramos foi em 2026-10-12. Conforme nossa passagem pelos marketplaces em 2026-10-12.

O que pede

  • Roda na sua máquina
  • Segredos: 3
  • Configurações: 3
  • Ferramentas: 25

Ferramentas que declara: 25. Conforme declarado em: Docker MCP Catalog.

  • analyze_code_snippet
  • analyze_file_list
  • change_sonar_issue_status
  • create_webhook
  • get_component_measures
  • get_project_quality_gate_status
  • get_raw_source
  • get_scm_info
  • get_system_health
  • get_system_info
  • get_system_logs
  • get_system_status
Mostrar mais 13
  • list_enterprises
  • list_languages
  • list_portfolios
  • list_quality_gates
  • list_rule_repositories
  • list_webhooks
  • ping_system
  • search_dependency_risks
  • search_metrics
  • search_my_sonarqube_projects
  • search_sonar_issues_in_projects
  • show_rule
  • toggle_automatic_analysis

Exige: SONARQUBE_ORG (secreta), SONARQUBE_TOKEN (secreta), SONARQUBE_URL (secreta)

O que declara, pede e executa, por completo

Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.

Funciona com

  • Claude Code
  • Codex
  • Cursor
  • VS Code
  • Copilot CLI

Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.

Conectar

Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.

Como servidor MCP local: imagem Docker

Gerado a partir do que Official MCP Registry declara.

Claude CodeTerminal
claude mcp add --env "SONARQUBE_ORG=<YOUR_SONARQUBE_ORG>" --env "SONARQUBE_TOKEN=<YOUR_SONARQUBE_TOKEN>" --env "SONARQUBE_URL=<YOUR_SONARQUBE_URL>" --transport stdio sonarqube-mcp-server -- docker run -i --rm -e SONARQUBE_ORG -e SONARQUBE_TOKEN -e SONARQUBE_URL docker.io/sonarsource/sonarqube-mcp
Codex~/.codex/config.toml
[mcp_servers.sonarqube-mcp-server]
command = "docker"
args = ["run", "-i", "--rm", "-e", "SONARQUBE_ORG", "-e", "SONARQUBE_TOKEN", "-e", "SONARQUBE_URL", "docker.io/sonarsource/sonarqube-mcp"]

[mcp_servers.sonarqube-mcp-server.env]
SONARQUBE_ORG = "<YOUR_SONARQUBE_ORG>"
SONARQUBE_TOKEN = "<YOUR_SONARQUBE_TOKEN>"
SONARQUBE_URL = "<YOUR_SONARQUBE_URL>"
Cursor~/.cursor/mcp.json
{
  "mcpServers": {
    "sonarqube-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONARQUBE_ORG",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "SONARQUBE_URL",
        "docker.io/sonarsource/sonarqube-mcp"
      ],
      "env": {
        "SONARQUBE_ORG": "<YOUR_SONARQUBE_ORG>",
        "SONARQUBE_TOKEN": "<YOUR_SONARQUBE_TOKEN>",
        "SONARQUBE_URL": "<YOUR_SONARQUBE_URL>"
      }
    }
  }
}
DockerTerminal
docker run -i --rm -e "SONARQUBE_ORG=<YOUR_SONARQUBE_ORG>" -e "SONARQUBE_TOKEN=<YOUR_SONARQUBE_TOKEN>" -e "SONARQUBE_URL=<YOUR_SONARQUBE_URL>" docker.io/sonarsource/sonarqube-mcp

Substitua os valores entre sinais de menor e maior pelos seus. Mostramos os nomes das configurações, nunca valores.

Não guardamos argumentos de inicialização. Se o servidor precisar de algum, a própria documentação dele os indica.

Onde está publicado

MarketplaceStatusVersãoNúmerosVerificadoVisto pela primeira vez
Official MCP Registry (Abrir o registro) Listado 1.21.0 Forks (GitHub): 103
Estrelas (GitHub): 659		 Sem marcação
Docker MCP Catalog (Abrir no Docker Hub) Listado sha256:925c88bc7cab Forks (GitHub): 103
Downloads (Docker Hub): 1 496 006
Estrelas (Docker Hub): 23
Estrelas (GitHub): 659		 Sem marcação

Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.

O que mudou

Nada mudou neste plugin desde que começamos a acompanhá-lo.

Possivelmente o mesmo plugin

Listagens que compartilham um sinal com esta, mas não o bastante para tratá-las como o mesmo produto.

  • sonarqubeSonarSource · O mesmo nome do mesmo autor em outro marketplace

Plugins semelhantes

Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.

  • Sonar MCP Server

    Read-only SonarQube Community Build access for AI agents: issues, hotspots, rules, code snippets

    de igorolv · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • Opzyai Pro

    Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

    de opzyai.com · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • fixme-agent io.github.rotem1230/fixme-agent

    Real-time AI code quality — 30 validators, 17 languages, 813+ checks

    de rotem1230 · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • codacy com.mcparmory/codacy

    Analyze code quality, security issues, and coverage across repositories

    de mcparmory.com · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • Repository Intelligence

    Analyze repos of any size - security scanning code analysis monorepo support

    de nirholas · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • Understand Anything - MCP

    A powerful MCP server for codebase architecture analysis and automated governance.

    de uamcp · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • mcp io.snyk/mcp

    Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

    de snyk.io · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • readyorai io.github.TedoNeObichaJavaScript/readyorai

    Zero-cost MCP server for local code inspection and best-practice recommendations

    de TedoNeObichaJavaScript · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • CodeSherlock

    AI-powered static and contextual code analysis MCP server

    de FGC-Shreyansh-Chachaundiya · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • sphior-code-mcp io.github.Toraastrta/sphior-code-mcp

    Deterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.

    de Toraastrta · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

Plugins semelhantes por marketplace

A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?

Listado em Claude Code: claude-plugins-community (5)

  • sonatype-guide

    Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…

    de sonatype · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • opsera-devsecops

    Opsera DevSecOps Agent — AI-powered architecture analysis, security scanning, compliance auditing, and SQL security for your codebase. Free trial included.

    de opsera-agents · Pacote de plugins

    Listado em: Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • Endor Labs Agent Kit

    Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

    de endorlabs · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • oh-my-secuaudit

    Security audit skill collection — SAST, DAST, external software analysis, architecture review, dataflow clustering, assessment-as-code methodology

    de windshock · Pacote de plugins

    Listado em: Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • aikido

    Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.

    de AikidoSec · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community, Community GitHub marketplaces · Descreve quase a mesma tarefa

Listado em Claude Code: claude-plugins-official (5)

  • sonatype-guide

    Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…

    de sonatype · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • Endor Labs Agent Kit

    Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain

    de endorlabs · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • aikido

    Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.

    de AikidoSec · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community, Community GitHub marketplaces · Descreve quase a mesma tarefa

  • sonarqube

    Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…

    de SonarSource · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Copilot CLI: github/awesome-copilot, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • Setup MCP Agent Analytics

    Detect an MCP server's language (Python, TypeScript or Go) and instrument it with the matching Pendo SDK so MCP tool calls flow into Pendo Agent Analytics.

    de pendo-io · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official · Descreve quase a mesma tarefa

Listado em Claude: knowledge-work-plugins (5)

  • Qodo

    Bring Qodo's codebase intelligence, coding standards, and code review into your coding agent.

    de qodo-ai · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins · Descreve quase a mesma tarefa

  • stackhawk-hawkscan

    Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…

    de stackhawk · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins · Descreve quase a mesma tarefa

  • security-guidance

    Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…

    de Anthropic · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins · Descreve quase a mesma tarefa

  • vanta

    The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…

    de VantaInc · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • stackhawk-api

    Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…

    de stackhawk · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude: knowledge-work-plugins · Descreve quase a mesma tarefa

Listado em Codex: openai-curated (openai/plugins) (5)

  • Sentry

    Inspect recent issues and events in Sentry from Codex.

    de OpenAI · Pacote de plugins

    Listado em: Codex: openai-curated (openai/plugins) · Descreve quase a mesma tarefa

  • Codex Security

    Codex Security workflows for security scans, analysis, and investigation.

    de OpenAI · Pacote de plugins

    Listado em: Codex: openai-curated (openai/plugins) · Descreve quase a mesma tarefa

  • GitHub

    Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.

    de OpenAI · Pacote de plugins

    Listado em: Codex: openai-curated (openai/plugins) · Descreve quase a mesma tarefa

  • CodeRabbit

    AI-powered code review in Codex, powered by CodeRabbit.

    de CodeRabbit AI · Pacote de plugins

    Listado em: Codex: openai-curated (openai/plugins) · Descreve quase a mesma tarefa

  • Plugin Eval

    Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.

    de OpenAI Codex · Pacote de plugins

    Listado em: Codex: openai-curated (openai/plugins) · Descreve quase a mesma tarefa

Listado em Community GitHub marketplaces (5)

  • sourcery-agent

    Sourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).

    de abyssbugg · Pacote de plugins

    Listado em: Community GitHub marketplaces · Descreve quase a mesma tarefa

  • 4da-mcp-server io.github.4DA-Systems/4da-mcp-server

    Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.

    de 4DA-Systems · Servidor MCP

    Listado em: Official MCP Registry, Community GitHub marketplaces · Descreve quase a mesma tarefa

  • aikido

    Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.

    de AikidoSec · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community, Community GitHub marketplaces · Descreve quase a mesma tarefa

  • Dynatrace

    Dynatrace observability skills: DQL query patterns, application and infrastructure monitoring, log analysis, problem investigation, and incident response workflows, with the…

    de Dynatrace · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Official MCP Registry, Community GitHub marketplaces · Descreve quase a mesma tarefa

  • 42crunch-api-security-testing

    Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…

    de 42Crunch-AI · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Claude Code: claude-plugins-community, Community GitHub marketplaces · Descreve quase a mesma tarefa

Listado em Copilot CLI: github/awesome-copilot (5)

  • sonarqube

    Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…

    de SonarSource · Pacote de plugins

    Listado em: Claude Code: claude-plugins-official, Copilot CLI: github/awesome-copilot, Claude Code: claude-plugins-community · Descreve quase a mesma tarefa

  • datadog

    Use Datadog directly in Copilot / VS Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation.

    de datadog-labs · Pacote de plugins

    Listado em: Copilot CLI: github/awesome-copilot · Descreve quase a mesma tarefa

  • modernization-workflow

    Visualize and guide the GitHub Copilot Modernize CLI Assess, Plan, and Execute workflow for .NET, Java, and C++ application repositories.

    de EMEA App GBB · Pacote de plugins

    Listado em: Copilot CLI: github/awesome-copilot · Descreve quase a mesma tarefa

  • cast-imaging

    A comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.

    de Awesome Copilot Community · Pacote de plugins

    Listado em: Copilot CLI: github/awesome-copilot · Descreve quase a mesma tarefa

  • bd-skills

    Helps GitHub Copilot investigate mobile app telemetry, diagnose crashes, manage [bitdrift](bitdrift.ai) workflows and dashboards, integrate the Capture SDK into iOS, Android, and…

    de bitdriftlabs · Pacote de plugins

    Listado em: Copilot CLI: github/awesome-copilot · Descreve quase a mesma tarefa

Listado em Copilot CLI: github/copilot-plugins (5)

  • advanced-security

    Advanced Security plugin for GitHub Copilot.

    de github · Pacote de plugins

    Listado em: Copilot CLI: github/copilot-plugins · Descreve quase a mesma tarefa

  • azure-devops-copilot-plugin

    Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.

    de microsoft · Pacote de plugins

    Listado em: Copilot CLI: github/copilot-plugins · Descreve quase a mesma tarefa

  • microsoft-365-agents-toolkit

    Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.

    de microsoft · Pacote de plugins

    Listado em: Copilot CLI: github/copilot-plugins · Descreve quase a mesma tarefa

  • canvas-apps

    Build Power Apps Canvas Apps using the Canvas Authoring MCP server.

    de microsoft · Pacote de plugins

    Listado em: Copilot CLI: github/copilot-plugins · Descreve quase a mesma tarefa

  • cpp-language-server

    Navigate and interact with your C++ code using the Microsoft C++ Language Server.

    de microsoft · Pacote de plugins

    Listado em: Copilot CLI: github/copilot-plugins · Descreve uma tarefa semelhante

Listado em Cursor: cursor/plugins (5)

  • Agent Compatibility

    CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.

    de Cursor · Pacote de plugins

    Listado em: Cursor: cursor/plugins · Descreve quase a mesma tarefa

  • Cursor SDK

    Build apps, scripts, and automations with the TypeScript SDK.

    de Cursor · Pacote de plugins

    Listado em: Cursor: cursor/plugins · Descreve quase a mesma tarefa

  • Origin Apps

    Skills for building on the Cursor Origin API. Fetch the live spec first, then follow the Origin rules for credentials, scopes, webhooks, paging, and errors. Includes a skill that…

    de Cursor · Pacote de plugins

    Listado em: Cursor: cursor/plugins · Descreve quase a mesma tarefa

  • Cursor Team Kit

    Internal team workflows for CI, code review, shipping, local automation, and verification.

    de Eric Zakariasson · Pacote de plugins

    Listado em: Cursor: cursor/plugins · Descreve quase a mesma tarefa

  • Create Plugin

    Scaffold and validate new agent plugins.

    de Cursor · Pacote de plugins

    Listado em: Cursor: cursor/plugins · Descreve quase a mesma tarefa

Listado em Docker MCP Catalog (5)

  • SmartBear MCP

    MCP server for AI access to SmartBear tools, including BugSnag, Reflect, Swagger, PactFlow, QTM4J.

    de smartbear.com · Servidor MCP

    Listado em: Official MCP Registry, Docker MCP Catalog · Descreve quase a mesma tarefa

  • stackhawk com.stackhawk/stackhawk

    An MCP server that provides interaction with StackHawk's security scanning platform.

    de stackhawk.com · Servidor MCP

    Listado em: Official MCP Registry, Docker MCP Catalog · Descreve quase a mesma tarefa

  • Semgrep

    MCP server for using Semgrep to scan code for security vulnerabilities.

    de docker · Servidor MCP

    Listado em: Docker MCP Catalog · Descreve quase a mesma tarefa

  • Sequa.AI

    Stop stitching context for Copilot and Cursor. With Sequa MCP, your AI tools know your entire codebase and docs out of the box.

    de sequa-ai · Servidor MCP

    Listado em: Docker MCP Catalog · Descreve quase a mesma tarefa

  • npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp

    Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

    de Nekzus · Servidor MCP

    Listado em: Official MCP Registry, Docker MCP Catalog · Descreve quase a mesma tarefa

Listado em Official MCP Registry (5)

  • Sonar MCP Server

    Read-only SonarQube Community Build access for AI agents: issues, hotspots, rules, code snippets

    de igorolv · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • Opzyai Pro

    Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

    de opzyai.com · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • fixme-agent io.github.rotem1230/fixme-agent

    Real-time AI code quality — 30 validators, 17 languages, 813+ checks

    de rotem1230 · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • codacy com.mcparmory/codacy

    Analyze code quality, security issues, and coverage across repositories

    de mcparmory.com · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

  • Repository Intelligence

    Analyze repos of any size - security scanning code analysis monorepo support

    de nirholas · Servidor MCP

    Listado em: Official MCP Registry · Descreve quase a mesma tarefa

Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.

Este plugin é seu?

Adicione-o aos seus projetos e prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS. Você recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.

Adicionar aos seus projetos Veja o que o painel faz

Dados de Official MCP Registry. Dados de Docker MCP Catalog. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.

De onde vêm os dados: como o catálogo é montado