> For the complete documentation index, see [llms.txt](https://docs.sonarsource.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sonarsource.com/agent-centric-development-cycle/developer-tools/agent-plugins/kiro.md).

# Kiro

The SonarQube Power for Kiro connects Amazon's AI coding IDE to SonarQube's code quality and security data through the [About the MCP Server](/sonarqube-mcp-server/about-the-mcp-server.md). SonarQube does the analysis; Kiro calls the MCP tools and acts on the results. Once installed and configured, Kiro's agent can run SonarQube analysis on code snippets, retrieve information about issues, check quality gates, fetch coverage and duplication information, pull dependency risks, and synchronize project context for better-informed code changes.

The Power works with SonarQube Cloud or SonarQube Server.

## Features

The Power gives Kiro's agent access to the full set of [Tools](/sonarqube-mcp-server/reference/tools.md) exposed by the SonarQube MCP Server, including:

* Code analysis: analyze code snippets and files in the agent context.
* Issues: search, review, and update code issues.
* Quality gates: check the quality gate status for a project.
* Security hotspots: search and review security hotspots.
* Coverage: find under-covered files and review line-by-line coverage.
* Dependencies: check third-party dependencies for SCA issues.

> **Note:** The Kiro Power doesn't install hooks, so secrets detection, agentic analysis, and context augmentation aren't configured automatically. You can still access each one:
>
> * **Secrets detection**: Secrets detection is built into the SonarQube CLI. After installing the CLI as directed during Power setup, run `sonar analyze secrets <path>` from your terminal.
> * **Agentic analysis**: Available through the SonarQube MCP Server with the `analysis` toolset enabled. See [agentic analysis](/agent-centric-development-cycle/verify/how-to-guides/make-your-agent-verify-its-code.md#sonarqube-mcp-server-integration) for toolset setup steps.
> * **Context augmentation**: Requires a local MCP Server running in a container runtime with a volume mount and the `cag` toolset. See [context augmentation](/agent-centric-development-cycle/guide/add-context-to-generate-better-code.md#install-with-the-sonarqube-mcp-server) for toolset setup steps.

## Prerequisites

* A SonarQube Cloud organization or SonarQube Server instance.
* [Kiro](https://kiro.dev/) installed.
* The SonarQube CLI. Kiro will guide you through the installation as part of your Power setup. The MCP Server uses your `sonar auth login` session to connect.

## Install

The SonarQube Power is published on the [Kiro Powers marketplace](https://kiro.dev/powers/). Find **SonarQube** and click **Add to Kiro** — the MCP Server configuration is applied automatically.

## Configuration

Log in so the MCP Server can connect:

```bash
sonar auth login
```

Use the command for your scenario:

| Scenario             | Command                                                             |
| -------------------- | ------------------------------------------------------------------- |
| SonarQube Cloud (EU) | `sonar auth login -o <YourOrganizationKey>`                         |
| SonarQube Cloud (US) | `sonar auth login -o <YourOrganizationKey> -s https://sonarqube.us` |
| SonarQube Server     | `sonar auth login -s <YourServerURL>`                               |

Your browser opens to complete login, and the token is stored in your system keychain. Check your authentication anytime with `sonar auth status`.

## Verify that it works

In Kiro's chat, ask: *"List my SonarQube projects."* Kiro should call the SonarQube MCP Server and return your project list. If it doesn't, check Kiro's MCP settings to confirm the SonarQube Power is enabled, then run `sonar auth status` to confirm the underlying token is healthy and restart Kiro.

## Related pages

* [Kiro Powers marketplace](https://kiro.dev/powers/)
* [Kiro](/sonarqube-mcp-server/setup/quickstart-guides/kiro.md)
* [Context augmentation](/agent-centric-development-cycle/guide/sonar-vortex-context-augmentation.md)
* [Agentic analysis](/agent-centric-development-cycle/verify/sonar-vortex-agentic-analysis.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.sonarsource.com/agent-centric-development-cycle/developer-tools/agent-plugins/kiro.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.