SSonarQubeThe SonarQube MCP Server is a Model Context Protocol (MCP) server that enables seamless integration with SonarQube Server or Cloud for code quality and security. It also supports the analysis of code snippet directly within the agent context.

mcp-so:sonarqube-mcp-server_SonarSource

View source

85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

Score

85/100

HIGH 1

Findings (1)

HIGH

Inline code execution in MCP command MCPCFG_006

mcp-config L54

Detects MCP servers using inline code execution via -e, -c, or eval flags

"args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SONARQUBE_TOKEN",
        "-e",
        "SONARQUBE_URL",
        "-e",
        "SONARQUBE_ORG"

FIX

Restrict MCP server permissions to the minimum required. Remove broad filesystem, network, or execution permissions and use scoped access controls (specific directories, specific tools).

FP?

Likely FP if the broad permissions are in a development/testing configuration that is clearly not intended for production use.