← Back to search

@jl-0/sonarqube-mcp-server

jl-0 Scanned just now

Model Context Protocol server for SonarQube

npm ↗
? Not scanned yet

Versions

1.3.2latest
Jun 5, 2025

Tools 18

projects
annotations: none low

List all SonarQube projects

page string page_size string
metrics
annotations: none low

Get available metrics from SonarQube

page string page_size string
issues
annotations: none low

Get issues for a SonarQube project with advanced filtering, sorting, and branch/PR support

s string page string author string branch string page_size string created_at string project_key string pull_request string created_after string created_before string created_in_last string
system_health
annotations: none low

Get the health status of the SonarQube instance

system_status
annotations: none low

Get the status of the SonarQube instance

system_ping
annotations: none low

Ping the SonarQube instance to check if it is up

measures_component
annotations: none low

Get measures for a specific component

branch string period string component string pull_request string
measures_components
annotations: none low

Get measures for multiple components

page string branch string period string page_size string pull_request string
measures_history
annotations: none low

Get measures history for a component

to string from string page string branch string component string page_size string pull_request string
quality_gates
annotations: none low

List available quality gates

quality_gate
annotations: none low

Get quality gate conditions

id string
quality_gate_status
annotations: none low

Get project quality gate status

branch string project_key string pull_request string
source_code
annotations: none low

View source code with issues highlighted

to string key string from string branch string pull_request string
scm_blame
annotations: none low

Get SCM blame information for source code

to string key string from string branch string pull_request string
hotspots
annotations: none low

Search for security hotspots with filtering options

page string branch string page_size string project_key string pull_request string
hotspot
annotations: none low

Get detailed information about a specific security hotspot

hotspot_key string
update_hotspot_status
annotations: none low

Update the status of a security hotspot (requires appropriate permissions)

comment string hotspot_key string
issue_transition
annotations: none low

Perform a state transition on an issue (requires appropriate permissions)

issue string comment string isFeedback boolean

Permissions 2

filesystem low
Server uses filesystem capabilities via: fs sync ops
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 49

low
Tool 'projects' has no annotations annotation_checker · 100%
low
Tool 'metrics' has no annotations annotation_checker · 100%
low
Tool 'issues' has no annotations annotation_checker · 100%
low
Tool 'system_health' has no annotations annotation_checker · 100%
low
Tool 'system_status' has no annotations annotation_checker · 100%
low
Tool 'system_ping' has no annotations annotation_checker · 100%
low
Tool 'measures_component' has no annotations annotation_checker · 100%
low
Tool 'measures_components' has no annotations annotation_checker · 100%
low
Tool 'measures_history' has no annotations annotation_checker · 100%
low
Tool 'quality_gates' has no annotations annotation_checker · 100%
low
Tool 'quality_gate' has no annotations annotation_checker · 100%
low
Tool 'quality_gate_status' has no annotations annotation_checker · 100%
low
Tool 'source_code' has no annotations annotation_checker · 100%
low
Tool 'scm_blame' has no annotations annotation_checker · 100%
low
Tool 'hotspots' has no annotations annotation_checker · 100%
low
Tool 'hotspot' has no annotations annotation_checker · 100%
low
Tool 'update_hotspot_status' has no annotations annotation_checker · 100%
low
Tool 'issue_transition' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: projects manifest_parser · 70%
info
Tool: metrics manifest_parser · 70%
info
Tool: issues manifest_parser · 70%
info
Tool: system_health manifest_parser · 70%
info
Tool: system_status manifest_parser · 70%
info
Tool: system_ping manifest_parser · 70%
info
Tool: measures_component manifest_parser · 70%
info
Tool: measures_components manifest_parser · 70%
info
Tool: measures_history manifest_parser · 70%
info
Tool: quality_gates manifest_parser · 70%
info
Tool: quality_gate manifest_parser · 70%
info
Tool: quality_gate_status manifest_parser · 70%
info
Tool: source_code manifest_parser · 70%
info
Tool: scm_blame manifest_parser · 70%
info
Tool: hotspots manifest_parser · 70%
info
Tool: hotspot manifest_parser · 70%
info
Tool: update_hotspot_status manifest_parser · 70%
info
Tool: issue_transition manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 545 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%