Reported issues for SonarQube MCP Server

Pod holds 16 of 16 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to SonarQube MCP Server.

Most discussed

is there any helm charts to host this mcp remotely ?

Your question or feedback

am planning to host this mcp server on EKS , so users no need to install in their laptop , instead they can use the centrally running mcp server and that can call to sonarqube ? do we have helm charts for hosting this mcp ? if yes let me know ,

FYI, we are using self hosted sonarqube

Read the thread · 2026-08-18 · closed · external user · 3 comments

Tool list costs ~11k tokens per conversation; 30% concentrated in three tools

The tool list this server advertises costs roughly 11,000 tokens, which every client pays on every conversation before a single tool is called. Sharing the measurement in case it's useful — the numbers are concentrated in a few tools rather than spread evenly, so there may be an easy win.

Measurement

sonarqube-mcp-server 1.24.0.3152, 18 tools, tool list ≈ 11,052 tokens (~4 chars/token over the serialized tools/list response).

Per tool, heaviest first:

Read the thread · 2026-08-12 · open · external user · 2 comments

Audit log

Problem / use case

I would like to track which tool was executed by which user (identified by user token) and with what context/arguments. We need this for compliance and security reasons. What I currently see in the log is tool and execution time.

INFO SonarQube MCP Server - Tool called: show_rule
INFO SonarQube MCP Server - Tool completed: show_rule (execution time: 136ms)

Proposed solution

mcp-audit.log

INFO SonarQube MCP Server - Tool called: show_rule, User: JohnDoe,

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/502) · 2026-07-21 · open · external user · 3 comments

### Short-lived no-PR branch support

### Problem / use case

We use the short-lived branches in SonarQube a lot. We don't have PRs in SonarQube and want to keep it that way.
I would like to use SonarQube MCP to get the issues and coverage from SonarQube, so an LLM can use SonarQube info to fix the issues and implement tests to improve coverage.

### Proposed solution

Any solution that supports short-lived branches without PRs is good for me.
At first glance, I suggest a get_short_lived_branches_without_PR tool and having other too

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/468) · 2026-06-26 · closed · external user · 2 comments

### 403 "Origin not allowed" error on SonarQube Cloud-hosted MCP server from non-browser clients

### Environment

- **MCP Client:** opencode v1.17.9
- **SonarQube Platform:** SonarQube Cloud (api.sonarcloud.io)
- **MCP Server Version:** Cloud-hosted (embedded)
- **Transport:** HTTP (Streamable HTTP)
- **Authentication:** Bearer token with `SONARQUBE_ORG` header

---

### Description

After the upgrade to MCP Java SDK 2.0.0 (PR #442, merged June 22, 2026), the SonarQube Cloud-hosted MCP server at `https://api.sonarcloud.io/mcp` rejects requests from non-browser MCP clients with a `403` statu

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/462) · 2026-06-24 · closed · external user · 2 comments

### Feature Request: CSharp support

### Problem / use case

I would like to use the SonarQube MCP server to analyse my C# project, but C# is not on the list of languages supported by the `analyze_code_snippet` tool. Are there any plans to add C# to the list?

### Proposed solution

Add support for C# in the `analyze_code_snippet` tool

### Alternatives considered

_No response_

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/436) · 2026-06-10 · open · external user · 2 comments

### Support of branch parameter for all tools

Currently the branch parameter is not supported for quality gate / project status and searching issues, only pull requests.

As we uses branch analysis we need this support in mcp server as well.

Example Prompts we would like to work:

- Retrieve quality gate for projectKey: "our:project", branch: "ourBranch"
- Retrieve issues for projectKey: "our:project", branch: "ourBranch"

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/421) · 2026-05-29 · closed · external user · 5 comments

### Feature Request: OAuth / SSO authentication support (GitHub, Azure AD, SAML)

## Summary

The MCP server currently only supports token-based authentication via the `SONARQUBE_TOKEN` environment variable. Many SonarQube Community and Enterprise deployments rely on **SSO providers** (GitHub OAuth, Azure AD, SAML, etc.) as their primary — and sometimes *only* — authentication mechanism. In those setups, users may not be able to generate personal tokens at all, or doing so is an extra friction step that breaks the seamless experience the MCP is supposed to provide.

## Proble

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/360) · 2026-04-24 · open · external user · 2 comments

## Most recent

### Authentication failing for Community EditionVersion 9.9.1 (build 69595)

### Your question or feedback

Hi! 

Authentication is failing on Community EditionVersion 9.9.1 (build 69595); so is this supported version?

Thanks

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/542) · 2026-08-27 · open · external user · 1 comment

### SonarQube MCP does not recover after a local SonarQube container restart

### SonarQube MCP Server version

26.8.0.126808

### How are you running the server?

Docker image

### MCP client / agent

Copilot CLI

### SonarQube backend

SonarQube Community Build

### What happened

```shell
When the SonarQube MCP server has connected to a SonarQube instance and that instance's Docker
container is stopped and started again, the MCP server can lose connectivity permanently for the
remainder of the client session. Subsequent MCP requests cannot re-establish a usable connect

[Read the thread](https://github.com/SonarSource/sonarqube-mcp-server/issues/537) · 2026-08-20 · open · external user · 1 comment

### Make background initialization timeout an optional configurable value

### Problem / use case

Currently, in environments with significant latency, it is not possible to manually run the MCP container because it shuts down before it is able to download all of the plugins from the server. Some of the downloads complete successfully but due to the downloads taking longer than expected, the shutdown sequence is started prior to the other plugins being given enough time to download. See logs below:

DEBUG SonarQube MCP Server - === Debug Level Configuration Detail

Read the thread · 2026-07-29 · open · external user · 0 comments

Allow the MCP server to filter for issues in new code

Problem / use case

We want to allow an agent to review and fix the issues on new code.

Claude introduces a workaround for this, by matching issue creation dates against the new-code counts of the quality gate, stating that the SonarQube MCP does not support such a filter directly.

Proposed solution

For us, it would be great if the functionalities provided by the MCP server would include a direct filter option, so that agents can refer to it.

Alternatives considered

_No respon

Read the thread · 2026-07-23 · open · external user · 1 comment

MCP server was blocked by policy

SonarQube MCP Server version

latest

How are you running the server?

Docker image

MCP client / agent

GitHub Copilot CLI

SonarQube backend

SonarQube Cloud

What happened

I got this error only with Copilot CLI (but it works with GH Copilot chat)
1 MCP server was blocked by policy: 'io.github.SonarSource/sonarqube-mcp-server'
I don't understand because this MCP is in Github Registry

What you expected to happen

Working on copilot and copilot CLI

Ste

Read the thread · 2026-07-21 · open · external user · 1 comment

Workspace Mount requires fileContent property

SonarQube MCP Server version

latest

How are you running the server?

Docker image

MCP client / agent

VS Code

SonarQube backend

SonarQube Cloud

What happened

Tool analyze_code_snippet responds with required property 'fileContent' error when workspace mount is configured.

Tool args in request: { filePath, language, projectKey, scope }

What you expected to happen

Successful analyze_code_snippet tool call using filePath property

Steps to reproduce

Read the thread · 2026-07-01 · open · external user · 1 comment

bug: tool access logged at warning level rather than info or debug

Normal tool access is being logged at a warning level which is misleading and results in higher cognitive load when trying to debug actual issues.

Read the thread · 2026-05-28 · open · external user · 1 comment

BUG: analyze_code_snippet silently returns 0 issues on .tsx/.jsx (no tsx/jsx in language enum)

analyze_code_snippet silently returns 0 issues on .tsx/.jsx (no tsx/jsx in language enum)

Tool: analyze_code_snippet · Image: mcp/sonarqube:latest · CLI: v0.12.0

Bug

The language enum exposes ts and js but no tsx/jsx. Passing language: ["ts"] on JSX-containing content makes the TS analyzer bail without error and return {"issues":[],"issueCount":0}. CI (sonar-scanner) on the same project + same quality profile catches the issues correctly

Read the thread · 2026-05-13 · closed · external user · 2 comments

The remaining reports are on the project's issue tracker.