# SonarQube

SecureBarndoor ManagedDevOps & Infrastructure

**Summary:** SonarQube is a code quality and security analysis platform that helps engineering teams identify bugs, vulnerabilities, and maintainability issues across their codebases with automated scanning and continuous monitoring.

**How Teams Use It:** With the Barndoor-Managed SonarQube MCP Server, teams can safely connect AI agents to review code quality metrics, analyze issues, inspect rules, monitor project health, and automate remediation workflows — all while respecting SonarQube permissions and keeping source code and scan results protected.

## Tools

| Tool Name                  | Tool Description                                                                                               | Tool Type |
|----------------------------|----------------------------------------------------------------------------------------------------------------|-----------|
| Change Issue Status        | Changes the status of a SonarQube issue. Can accept, mark as false positive, or reopen. Requires issue key and transition type. | Update    |
| Create Webhook             | Creates a new webhook in SonarQube. Enables notifications for project analysis events. Requires name, organization, and URL. | Create    |
| Get Component Measures     | Retrieves code quality metrics for a component. Returns values for specified metrics like coverage and bugs. Requires component key and metric keys. | Read      |
| Get Quality Gate Status    | Retrieves the quality gate status for a project. Returns pass/fail status and condition details. Requires project key. | Read      |
| Get Raw Source             | Retrieves the raw source code for a file. Returns source lines with issue annotations. Requires component key. | Read      |
| Get SCM Info              | Retrieves SCM (source control) information for a file. Returns author and revision data per line. Requires component key. | Read      |
| Get System Status          | Retrieves the SonarQube system status. Returns server health, version, and database status. No required inputs. | Read      |
| List Languages            | Lists all programming languages supported by this SonarQube instance. Returns language keys and names. No required inputs. | Read      |
| List Portfolios            | Lists enterprise portfolios in SonarQube. Returns portfolio names and aggregated metrics. Supports search filtering. | Read      |
| List Quality Gates         | Lists all quality gates defined in SonarQube. Returns gate names and conditions. No required inputs. | Read      |
| List Rule Repositories     | Lists all rule repositories in SonarQube. Returns repository names and languages. No required inputs. | Read      |
| List Webhooks              | Lists all webhooks configured in SonarQube. Returns webhook names and endpoints. Requires organization key. | Read      |
| Ping System                | Checks if the SonarQube server is accessible. Returns simple ping response for health checks. No required inputs. | Read      |
| Search Issues              | Searches for code quality issues across projects. Supports filtering by severity, type, language, and date. Requires Browse permission on projects. | Read      |
| Search Metrics             | Searches for available SonarQube metrics. Returns metric definitions and descriptions. Supports pagination. | Read      |
| Search My Projects         | Searches for projects accessible to the current user. Returns project names, keys, and quality gate status. Supports filtering. | Read      |
| Show Rule                  | Retrieves details for a specific coding rule. Returns rule description, severity, and parameters. Requires rule key. | Read      |