SonarCloud FAQs

Question 1

What core SonarCloud features can I manage with this integration?

Accepted Answer

You can manage SonarCloud projects, search and track issues with filtering, monitor project quality gate statuses, identify and search for security hotspots, and automate changes to security hotspot statuses and resolutions.

Question 2

How does this tool utilize AI?

Accepted Answer

It integrates with AI clients like Claude Code or Codex via the Model Context Protocol (MCP). This allows users to interact with SonarCloud data and trigger actions using natural language queries, automating tasks related to code quality and security.

Question 3

What are the prerequisites for setting up MCP SonarCloud?

Accepted Answer

You'll need Python 3.10 or higher, the 'uv' package manager, a SonarCloud account with an API token, and a compatible AI client such as Claude Code or Codex.

Question 4

What is the MCP SonarCloud tool?

Accepted Answer

The MCP SonarCloud tool is a Model Context Protocol (MCP) server that integrates SonarCloud's project, issue, quality gate, and security hotspot management capabilities directly into AI-driven workflows, enabling powerful automation and natural language interaction.

Question 5

Can I automate the resolution of security hotspots?

Accepted Answer

Yes, a key feature is the ability to automate changes to security hotspot statuses and resolutions. You can mark hotspots as 'TO_REVIEW' or 'REVIEWED' with resolutions like 'FIXED', 'SAFE', or 'ACKNOWLEDGED' via your AI client.

SonarCloud

SonarCloud

Key Features

Use Cases

Key Features

Use Cases