# SonarSource/sonarqube-mcp-server

Source: https://glimind.com/server/awesome%2Fsonarsource%2Fsonarqube-mcp-server
Registry id: `awesome/sonarsource/sonarqube-mcp-server`
Status: unknown

## Tools (49)

- `analyze_code_snippet`: Analyze file content with SonarQube analyzers to identify code quality and security issues.
- `analyze_file_list`: Analyze files in the current working directory using SonarQube for IDE.
- `change_security_hotspot_status`: Review a Security Hotspot by changing its status.
- `change_sonar_issue_status`: Change the status of a SonarQube issue to accept, falsepositive or reopen.
- `check_dependency`: Check a third-party dependency for security vulnerabilities, supply-chain malware, and license compliance.
- `create_webhook`: Create a new webhook for the SonarQube organization or project.
- `get_agentic_readiness_assessment`: Retrieve the result of an assessment.
- `get_component_measures`: Get SonarQube measures for a component (project, directory, file).
- `get_current_architecture`: Get a hierarchical architecture graph filtered by path prefix and depth.
- `get_downstream_call_flow`: Trace what functions a given function calls.
- `get_duplications`: Get duplications for a file.
- `get_file_coverage_details`: Get line-by-line coverage information for a specific file.
- `get_guidelines`: Get coding guidelines based on SonarQube project issues, catalog categories, or a combination.
- `get_intended_architecture`: Get user-defined architectural constraints specifying which modules are allowed to depend on others.
- `get_project_quality_gate_status`: Get the Quality Gate Status for the SonarQube project.
- `get_raw_source`: Get source code as raw text from SonarQube.
- `get_references`: Get direct inbound and outbound code references for a class or module.
- `get_scm_info`: Get SCM information of SonarQube source files.
- `get_source_code`: Get complete source code for a code element by its fully qualified name.
- `get_system_health`: Get the health status of SonarQube Server instance.
- `get_system_info`: Get detailed information about SonarQube Server system configuration.
- `get_system_logs`: Get SonarQube Server system logs in plain-text format.
- `get_system_status`: Get state information about SonarQube Server.
- `get_type_hierarchy`: Get the full inheritance hierarchy for a class-like structure.
- `get_upstream_call_flow`: Trace what functions call a given function.
- `list_agentic_readiness_assessments`: List all assessments for a project, newest first.
- `list_branches`: List analyzed branches for a project.
- `list_enterprises`: List the enterprises available in SonarQube Cloud that you have access to.
- `list_languages`: List all programming languages supported in this SonarQube instance.
- `list_organizations`: List SonarQube Cloud organizations that a user is a member of.
- `list_portfolios`: List enterprise portfolios available in SonarQube with filtering and pagination options.
- `list_pull_requests`: List all pull requests for a project.
- `list_quality_gates`: List all quality gates in my SonarQube.
- `list_webhooks`: List all webhooks for the SonarQube organization or project.
- `ping_system`: Ping the SonarQube Server system to check if it's alive.
- `run_advanced_code_analysis`: Run Vortex analysis on a single file.
- `search_by_body_patterns`: Find code elements by their implementation body using regex patterns.
- `search_by_signature_patterns`: Find code elements by their declaration signatures using regex patterns.
- `search_dependency_risks`: Search for software composition analysis issues (dependency risks) of a SonarQube project.
- `search_duplicated_files`: Search for files with code duplications in a SonarQube project.
- `search_files_by_coverage`: Search for files in a project sorted by coverage (ascending - worst coverage first).
- `search_metrics`: Search for SonarQube metrics.
- `search_my_sonarqube_projects`: Find SonarQube projects. The response is paginated.
- `search_security_hotspots`: Search for Security Hotspots in a SonarQube project.
- `search_sonar_issues_in_projects`: Search for SonarQube issues in my organization's projects.
- `show_rule`: Shows detailed information about a SonarQube rule.
- `show_security_hotspot`: Get detailed information about a specific Security Hotspot.
- `start_agentic_readiness_assessment`: Start an agentic readiness assessment for a project.
- `toggle_automatic_analysis`: Enable or disable SonarQube for IDE automatic analysis.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.