SONARLINT TOOLS

7 tools from the Sonarlint MCP Server, categorised by risk level.

// ALL 7 SONARLINT TOOLS

READ 6 tools

Read check_code Check code quality of a code snippet or content you have in hand — catches bugs, code smells, security issu... Read check_files Check multiple files for code quality issues in one call — bugs, code smells, security vulnerabilities. Use... Read check_quality Check a file for code quality issues — bugs, code smells, security vulnerabilities, and complexity problems... Read fix_all_issues Automatically fix all code quality issues in a file that have available quick fixes. Applies all SonarLint-... Read health_check Check if the code quality analysis backend is running and healthy. Shows installed language plugins, cache ... Read list_rules List all active code quality rules with ID, name, and severity. Use to look up what a rule means (e.g., S37...

WRITE 1 tools

Write fix_issue Automatically fix one specific code quality issue. Applies the SonarLint-suggested fix for the issue at the...

// RUNNING THIS SERVER

The managed route: connect Sonarlint through the PolicyLayer gateway — every tool call above is checked against your policy before it runs, with a full audit log.

DIRECT INSTALL (UNMANAGED) npx -y @nielspeter/sonarlint-mcp-server

// FAQ

How many tools does the Sonarlint MCP server have? +

The Sonarlint MCP server exposes 7 tools across 2 categories: Read, Write.

How do I enforce policies on Sonarlint tools? +

Route the Sonarlint server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Sonarlint tools fall into? +

Sonarlint tools are categorised as Read (6), Write (1). Each category has a recommended default policy.

Enforce policy on every Sonarlint tool call.

Start from Sonarlint, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Instant setup, no code required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.