Integration

SonarQube integration

SonarQube API for code quality and security analysis. Analyze source code for bugs, vulnerabilities, code smells, and technical debt. Track quality gates, manage projects, and integrate continuous inspection into CI/CD pipelines. Supports 30+ programming languages with deep static analysis capabilities. Essential for maintaining code quality standards and security compliance.

Connect SonarQube How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in SonarQube.Built from the 10 SonarQube tools below, on the connection you add once.

Common SonarQube use cases

profile management
analysis monitoring
CI/CD pipeline gates
code review interface
quality gate evaluation
developer issue assignment
refactoring prioritization
project inventory management
quality profile customization
security code review workflow

What you can do with SonarQube

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Activity, 1 operation

get_activityGet activityGETRetrieves analysis task activity for SonarQube projects. Returns analysis history with execution times, status, and any error messages for monitoring analysis health.

Duplication, 1 operation

get_duplicationsGet duplicationsGETRetrieves code duplication information for a file in SonarQube. Returns duplicated code blocks with exact line ranges and all locations where the code appears.

Hotspot, 1 operation

get_hotspotsGet hotspotsGETSearches security hotspots in a SonarQube project. Returns security-sensitive code patterns requiring manual review with OWASP and CWE classifications.

Issue, 1 operation

search_issuesSearch issuesGETSearches SonarQube issues across projects with powerful filtering. Returns bugs, vulnerabilities, code smells, and security hotspots with full context including file location and rule information.

Measure, 1 operation

get_component_measuresGet component measuresGETRetrieves quality metrics for a SonarQube project or component. Returns quantitative data for bugs, vulnerabilities, coverage, technical debt, and other code quality indicators.

Project, 1 operation

search_projectsSearch projectsGETSearches SonarQube projects by name or key. Returns project metadata including keys, names, visibility, and last analysis date for inventory management and discovery.

Quality gate, 1 operation

get_quality_gate_statusGet quality gate statusGETRetrieves quality gate status for a SonarQube project. Returns pass/fail status with detailed condition results for metrics like coverage, bugs, vulnerabilities, and duplications.

Quality profile, 1 operation

get_quality_profilesGet quality profilesGETSearches SonarQube quality profiles with filtering by language and project. Returns profile configurations including active rule counts and inheritance information.

Rule, 1 operation

get_rulesGet rulesGETSearches SonarQube analysis rules with filtering by language, type, severity, and tags. Returns rule details including descriptions, OWASP/CWE classifications, and remediation guidance.

Source, 1 operation

get_source_codeGet source codeGETRetrieves source code lines from SonarQube for a specific file. Returns code with line numbers, SCM blame information, and coverage data for display with analysis context.

Use SonarQube from Claude Code, Cursor or Codex

Connect SonarQube in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its SonarQube operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect SonarQube

Create your workspace
Sign up free. Nothing to install.
Connect SonarQube once
Add your SonarQube connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

SonarQube integration FAQ

What can you do with the SonarQube integration?

LiveContext exposes 10 operations on SonarQube, covering activity, duplication, hotspot and issue. Common uses include profile management, analysis monitoring and CI/CD pipeline gates.