AI capabilities

SonarQube Server offers a series of AI capabilities to help you produce secure and maintainable code.

SonarQube Server comes with a set of AI capabilities that fit in the Agent Centric Development Cycle (AC/DC), a framework that defines a continuous 3-stage loop for every AI-assisted change:

Guide → Verify → Solve

• Guide provides project context to agents before they write or edit code.
• Verify analyzes the resulting code.
• Solve fixes issues found during verification.

To learn more about AC/DC and how SonarQube Server features fit in the cycle, see Agent Centric Development Cycle.

AI CodeFix

SonarQube's AI CodeFix uses a large language model (LLM) to suggest fixes for issues found during analysis, the Solve stage of the AC/DC cycle. An Instance Admin enables the feature and chooses the LLM provider: Sonar's hosted models, your own Azure OpenAI or AWS Bedrock model, or a self-hosted gateway.

To turn on the feature and choose a provider, see the Enable AI CodeFix page. To learn how to get fix suggestions for your issues, see the Getting AI-generated fix suggestions article.

For AI-powered pull request review and CI failure analysis, see Gitar, a separate Sonar product.

SonarQube MCP Server

The SonarQube MCP Server is a Model Context Protocol (MCP) server that connects your AI coding agent to SonarQube Server. Once connected, your agent can retrieve issue data, project quality status, and more.

Available with all commercial editions (Developer, Enterprise, and Data Center edition), the MCP server can run directly on SonarQube Server. See the SonarQube Server-hosted page for setup instructions.

For step-by-step agent setup, see the IDE/CLI quickstart guides for the MCP server.