“An MCP server that extracts and resolves your Sonar issues, so you no longer have to pretend you’ll ‘get to them soon’.”
Just run it. No installation, no dependencies, no nonsense:
SONAR_TOKEN=your_token npx sonar-issues-mcp@latestIf it crashes, it's probably your token’s fault.
Create this file if it doesn’t exist:
.kiro/settings/mcp.json
Add the following:
{
"mcpServers": {
"sonar-issues-mcp": {
"command": "npx",
"args": ["sonar-issues-mcp@latest"],
"env": {
"SONAR_TOKEN": "your_sonar_token_here"
}
}
}
}Restart Kiro. If it still doesn’t show up, pretend this is a feature.
- Pulls Sonar issues so you don’t have to do it manually
- Fetches way-too-detailed issue info
- Generates “helpful” fix suggestions (results may vary)
- Batch analysis that makes you look productive
Visit:
https://your-sonar-server/account/security
Click Generate Tokens.
Give it a name.
Pretend the name matters.
| Name | Description |
|---|---|
| SONAR_TOKEN | Required, like oxygen |
MIT — because life is too short for complicated licenses.
