MCP Servers

igorolv/sonar-mcp-server

Read-only MCP server for self-hosted SonarQube Community Build 26.4+: lets AI agents (Claude Code, Cursor, Copilot) read issues, security hotspots, rules and code snippets to fix f

Our verdict

Not reviewed yet

We have not reviewed igorolv/sonar-mcp-server yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About igorolv/sonar-mcp-server

Read-only MCP server for self-hosted SonarQube Community Build 26.4 and later. It exposes issues, security hotspots, rules, and code snippets to AI agents such as Claude Code, Cursor, and Copilot so they can fix findings locally. Written in Java.

Best for

Teams using self-hosted SonarQube Community Build who want AI assistants to read and fix findings locally

Use cases

Pull SonarQube issues into an AI coding assistant
Review security hotspots before fixing them
Access rule definitions and code snippets during local remediation

Notes

0 stars on GitHub. Last updated 2026-09-18. Licensed MIT.

Pros

Read-only design avoids unintended changes to SonarQube data
Works with common AI agents like Claude Code, Cursor, and Copilot
Self-hosted keeps code and analysis data on-premises

Cons

Limited to SonarQube Community Build 26.4+
Read-only, so cannot update issue status or assign work
No stars or community traction yet, so maturity is unproven

Key facts

What we have checked

Days since the last commit: 53; Checked 10 Nov 2026GitHub
GitHub forks: 0; Checked 10 Nov 2026GitHub
GitHub stars: 0; Checked 10 Nov 2026GitHub
Open issues: 0; Checked 10 Nov 2026GitHub
Releases in the last 90 days: 1; Checked 10 Nov 2026GitHub

Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.

How to use

How to set it up

As the listing publishes it. We have not run this install.

Tools exposed

SONAR_URL
SONAR_TOKEN
SONAR_DEFAULT_PROJECT_KEY
SONAR_DEFAULT_BRANCH
SONAR_MCP_DATA_DIR
SONAR_MCP_PAGINATION_DEFAULT_LIMIT
SONAR_MCP_PAGINATION_DEFAULT_OFFSET
SONAR_MCP_PAGINATION_MAX_LIMIT
SONAR_MCP_SNIPPET_MAX_LINES
SONAR_MCP_PATH_FILTER_MAX_SCANNED_ISSUES
SONAR_MCP_TOOLS_ISSUE
SONAR_MCP_TOOLS_PROJECT
SONAR_MCP_TOOLS_HOTSPOT
SONAR_MCP_TOOLS_RULE

Clients the listing names (not checked here)

Claude Desktop, Claude Code, Cursor, VS Code

Install

Add igorolv/sonar-mcp-server to your client

Not verified yet

Our lab has not run this server yet. "Config checked" on a client means the recipe matches that client's documented config format; it does not mean we ran it.

Claude Code

Config checked

Run in your terminal (runs on your computer)

claude mcp add --env SONAR_URL=YOUR_SONAR_URL --env SONAR_TOKEN=YOUR_SONAR_TOKEN --transport stdio igorolv-sonar-mcp-server -- docker run -i --rm -e SONAR_URL -e SONAR_TOKEN ghcr.io/igorolv/sonar-mcp-server:0.1.0

Needs SONAR_URL and SONAR_TOKEN: replace each YOUR_ value with your own.

Version 0.1.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Claude Code's config docs

Claude Desktop

Config checked

Add to claude_desktop_config.json (runs on your computer)

{
  "mcpServers": {
    "igorolv-sonar-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONAR_URL",
        "-e",
        "SONAR_TOKEN",
        "ghcr.io/igorolv/sonar-mcp-server:0.1.0"
      ],
      "env": {
        "SONAR_URL": "YOUR_SONAR_URL",
        "SONAR_TOKEN": "YOUR_SONAR_TOKEN"
      }
    }
  }
}

Needs SONAR_URL and SONAR_TOKEN: replace each YOUR_ value with your own.

Version 0.1.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Claude Desktop's config docs

Cursor

Config checked

Add to .cursor/mcp.json (runs on your computer)

{
  "mcpServers": {
    "igorolv-sonar-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONAR_URL",
        "-e",
        "SONAR_TOKEN",
        "ghcr.io/igorolv/sonar-mcp-server:0.1.0"
      ],
      "env": {
        "SONAR_URL": "YOUR_SONAR_URL",
        "SONAR_TOKEN": "YOUR_SONAR_TOKEN"
      }
    }
  }
}

Needs SONAR_URL and SONAR_TOKEN: replace each YOUR_ value with your own.

Version 0.1.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Cursor's config docs

VS Code

Config checked

Add to .vscode/mcp.json (runs on your computer)

{
  "inputs": [
    {
      "type": "promptString",
      "id": "sonar-url",
      "description": "Base URL of the SonarQube instance, e.g. https://sonar.example.com",
      "password": true
    },
    {
      "type": "promptString",
      "id": "sonar-token",
      "description": "SonarQube user token (My Account -> Security -> Generate Tokens)",
      "password": true
    }
  ],
  "servers": {
    "igorolv-sonar-mcp-server": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONAR_URL",
        "-e",
        "SONAR_TOKEN",
        "ghcr.io/igorolv/sonar-mcp-server:0.1.0"
      ],
      "env": {
        "SONAR_URL": "${input:sonar-url}",
        "SONAR_TOKEN": "${input:sonar-token}"
      }
    }
  }
}

Needs SONAR_URL and SONAR_TOKEN: replace each YOUR_ value with your own.

Version 0.1.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against VS Code's config docs

Codex

Config checked

Add to ~/.codex/config.toml (runs on your computer)

[mcp_servers.igorolv-sonar-mcp-server]
command = "docker"
args = ["run", "-i", "--rm", "-e", "SONAR_URL", "-e", "SONAR_TOKEN", "ghcr.io/igorolv/sonar-mcp-server:0.1.0"]
env_vars = ["SONAR_URL", "SONAR_TOKEN"]

Needs SONAR_URL and SONAR_TOKEN: replace each YOUR_ value with your own.

Version 0.1.0 · From the Official MCP registry, read 24 Oct 2026 · Format checked against Codex's config docs

ChatGPT: ChatGPT connects only to remote servers that need no API key.

Recipes come from the server's entry in the official MCP registry. Check the package name before you run it, and keep keys out of shared files.

Works with

What igorolv/sonar-mcp-server connects to

5 clients, each with how we know and when we checked.

Works with	Type	How we know	Checked
Claude Code	Client	Install recipe matches the client's documented formatRuns locally, version 0.1.0Config checked	24 Oct 2026Claude Code docs
Claude Desktop	Client	Install recipe matches the client's documented formatRuns locally, version 0.1.0Config checked	24 Oct 2026Claude Desktop docs
Cursor	Client	Install recipe matches the client's documented formatRuns locally, version 0.1.0Config checked	24 Oct 2026Cursor docs
VS Code	Client	Install recipe matches the client's documented formatRuns locally, version 0.1.0Config checked	24 Oct 2026VS Code docs
Codex	Client	Install recipe matches the client's documented formatRuns locally, version 0.1.0Config checked	24 Oct 2026Codex docs

Stars and usage

How igorolv/sonar-mcp-server is growing

GitHub stars

0 to 0

stars. 29 Oct 2026 to 10 Nov 2026, 3 readings.

Source: GitHub. Checked 10 Nov 2026.

Health and security

Is igorolv/sonar-mcp-server looked after, and what do its setup files show

Health score

44 out of 100

Does someone look after this repository? It does not say the code is good or safe. Worked out from GitHub signals checked 10 Nov 2026. How it is worked out

Part	Points	What we saw
Recent activity	27.9 of 30	Last push 53 days ago
Releases	7.5 of 15	1 release in 90 days
Issue replies	Not counted	The latest check has no issue response reading (fewer than 3 measured issues, or issues switched off)
Maintainer	0 of 15	Owned by a single user
Official source	0 of 20	Community server

Alternatives

Alternatives to igorolv/sonar-mcp-server

Record	Type	How we know	Checked
SonarqubeThis is an alternative to it	Product	Named in the listing	Not dated

Compare

Compare igorolv/sonar-mcp-server side by side

igorolv/sonar-mcp-server vs Sonarqube

Sources

Where this comes from

GitHubRegistry
Checked 10 Nov 2026 · Days since the last commit, GitHub forks, GitHub stars, Open issues, Releases in the last 90 days

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Open-source & AI alternatives

Swap-in tools that solve the same job. Weigh the trade-offs before you commit.

Alternative to1 entry

Sonarqube

Open source alternatives to Sonarqube, ranked by GitHub stars and freshness.

Pairs with

Other entries in the index that connect to this one. Click through to see the chain.

Pairs with2 entries

MMCPlowCatalogue

kucherenko/jscpd

Various

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

MMCPlowCatalogue

repowise-dev/repowise

Various

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

← Back to MCP Servers Submit your own entry →