sonar-solutions/sonarqube-agentic-analysis-claude-code

$ claude mcp add sonarqube-agentic-analysis -e SONARQUBE_ORG=YOUR_SONARQUBE_ORG -e SONARQUBE_PROJECT_KEY=YOUR_SONARQUBE_PROJECT_KEY -e SONARQUBE_TOOLSETS=YOUR_SONARQUBE_TOOLSETS -e SONARQUBE_URL=YOUR_SONARQUBE_URL -- docker run -i --rm --pull=always -e SONARQUBE_URL -e SONARQUBE_TOKEN -e SONARQUBE_ORG -e SONARQUBE_PROJECT_KEY -e SONARQUBE_TOOLSETS -v '<ABSOLUTE_PATH_TO_YOUR_PROJECT>:/app/mcp-workspace:rw' mcp/sonarqube

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}