Sonar Qube MCP Server - Barndoor Documentation
SonarQube
SecureBarndoor ManagedDevOps & Infrastructure
Summary: SonarQube is a code quality and security analysis platform that helps engineering teams identify bugs, vulnerabilities, and maintainability issues across their codebases with automated scanning and continuous monitoring.
How Teams Use It: With the Barndoor-Managed SonarQube MCP Server, teams can safely connect AI agents to review code quality metrics, analyze issues, inspect rules, monitor project health, and automate remediation workflows — all while respecting SonarQube permissions and keeping source code and scan results protected.
Tools
| Tool Name | Tool Description | Tool Type |
|---|---|---|
| Change Issue Status | Changes the status of a SonarQube issue. Can accept, mark as false positive, or reopen. Requires issue key and transition type. | Update |
| Create Webhook | Creates a new webhook in SonarQube. Enables notifications for project analysis events. Requires name, organization, and URL. | Create |
| Get Component Measures | Retrieves code quality metrics for a component. Returns values for specified metrics like coverage and bugs. Requires component key and metric keys. | Read |
| Get Quality Gate Status | Retrieves the quality gate status for a project. Returns pass/fail status and condition details. Requires project key. | Read |
| Get Raw Source | Retrieves the raw source code for a file. Returns source lines with issue annotations. Requires component key. | Read |
| Get SCM Info | Retrieves SCM (source control) information for a file. Returns author and revision data per line. Requires component key. | Read |
| Get System Status | Retrieves the SonarQube system status. Returns server health, version, and database status. No required inputs. | Read |
| List Languages | Lists all programming languages supported by this SonarQube instance. Returns language keys and names. No required inputs. | Read |
| List Portfolios | Lists enterprise portfolios in SonarQube. Returns portfolio names and aggregated metrics. Supports search filtering. | Read |
| List Quality Gates | Lists all quality gates defined in SonarQube. Returns gate names and conditions. No required inputs. | Read |
| List Rule Repositories | Lists all rule repositories in SonarQube. Returns repository names and languages. No required inputs. | Read |
| List Webhooks | Lists all webhooks configured in SonarQube. Returns webhook names and endpoints. Requires organization key. | Read |
| Ping System | Checks if the SonarQube server is accessible. Returns simple ping response for health checks. No required inputs. | Read |
| Search Issues | Searches for code quality issues across projects. Supports filtering by severity, type, language, and date. Requires Browse permission on projects. | Read |
| Search Metrics | Searches for available SonarQube metrics. Returns metric definitions and descriptions. Supports pagination. | Read |
| Search My Projects | Searches for projects accessible to the current user. Returns project names, keys, and quality gate status. Supports filtering. | Read |
| Show Rule | Retrieves details for a specific coding rule. Returns rule description, severity, and parameters. Requires rule key. | Read |