MCP server

SonarSource/sonarqube-mcp-server

Official SonarQube MCP Server for code quality and security in AI agents

View source ↗

B82/100

Findings

med
No clear open-source license. Legal risk for adopters.
low
Binds to 0.0.0.0 in 2 file(s). Normal inside a container; exposed on a host it is reachable from the whole network.
low
No dependency lockfile — builds are not reproducible.

Evidence

Stars618

LanguageJava

LicenseNOASSERTION

Last commit-1 days ago

Archivedno

Lockfileabsent

Files scanned304

Auth indicatorsfound

HTTP surfaceno

Graded 10 Aug 2026 from public source only. No live endpoint was probed. Scores are produced by the published method; if you maintain this server and believe a finding is wrong, write to us and we will re-scan.