SonarQube Cloud + Memtro

Ask SonarQube Cloud whether a project passes its quality gate and which issues are open.

Connect SonarQube Cloud with a user token and your organisation key, and Memtro reads the projects you can browse, issues with rule, file and line, quality gate status with failing conditions, measures such as coverage, analyses and hotspots. It reads on demand and there is no hourly sync. When you ask, and once an administrator has granted the action by name, it can comment on, tag, assign and move issues through their workflow, create a project, retag one, and permanently delete a project with its whole analysis history. Accepting an issue drops it from the gate count.

In Memtro

What you can do with SonarQube Cloud in Memtro

Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right SonarQube Cloud tool, reads what it needs, and answers with the source cited.

What it does

  1. 01Projects in the organisation with key, visibility and last analysis date
  2. 02Issues by project, severity and status, with rule, file, line, author and assignee
  3. 03Quality gate status for a project, with each failing condition's actual value against its threshold
  4. 04Measures such as coverage, duplication and the A to E ratings, recent analyses, and security hotspots still to review
  5. 05When asked and granted, comments on an issue or edits a comment, adds or replaces its tags, assigns it, and confirms, resolves, accepts, marks false positive or reopens it
  6. 06When asked and granted, creates a project in the organisation, replaces a project's tags, or permanently deletes a project with all its analyses and history

Acts when asked

When you ask it to

These tools change something in SonarQube Cloud. The model is told to use them only when you ask for exactly that, and an administrator grants each one by name to the teams that may use it; a personal connection acts only after its owner allows it.

  1. 01Add a comment to a SonarQube Cloud issue
  2. 02Add tags to a SonarQube Cloud issue
  3. 03Move a SonarQube Cloud issue through its workflow (confirm, resolve, accept, false positive, reopen)
  4. 04Assign a SonarQube Cloud issue to a user, or unassign it
  5. 05Replace the tags on a SonarQube Cloud issue
  6. 06Edit a comment on a SonarQube Cloud issue
  7. 07Create a SonarQube Cloud project in the organisation
  8. 08Replace the tags on a SonarQube Cloud project
  9. 09Delete a SonarQube Cloud project and its analysis history (permanent)

Events

When it happens

Turn events on in the connection's Events tab on the Connections page, choose the kinds you want, and Memtro registers its address with SonarQube Cloud for you. Each event can start a job, with the event as its input. SonarQube Cloud signs every delivery, and one whose signature does not check out is refused before it is read.

Events and webhooks
  • 01A project analysis finished, or an issue change altered the quality gate
In practice

Ask it like you would a colleague

Once SonarQube Cloud is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.

SonarQube Cloud + Memtro
  • Does the payments service pass its quality gate, and if not, which conditions fail?

  • What new bugs were found in the payments service this week?

  • Which security hotspots are still to review on the api project?

  • Assign that vulnerability to Priya and tag it sprint-12

  • Mark issue AX-381 as a false positive with a comment explaining why

01

Why the gate went red

Before a release the engineering lead asks why the api project failed its quality gate. Memtro reads the gate status and the recent analyses, and answers that coverage on new code fell to 71% against an 80% threshold after Tuesday's analysis.

02

Triaging new vulnerabilities

On Monday Priya Nair asks for open critical vulnerabilities created last week. Memtro lists each with rule, file, line and assignee, then on her request assigns the two she is taking to herself and confirms them. SonarQube Cloud may notify her of the assignment.

Teams

Where it fits

The teams that lean on SonarQube Cloud most, a question each of them asks, and what they connect beside it.

Better together

Works with

A record in SonarQube Cloud is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.

Also in Engineering and operations

Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.

Setup

How to connect

Connect withUser token and Organization key
  1. 1

    In SonarQube Cloud open avatar → My Account → Security, name a token under Generate Tokens and copy it. It is shown once and carries your permissions, so Memtro can change only what your user may change

  2. 2

    Copy the organisation key from sonarcloud.io/organizations/<key> or from Organization settings

  3. 3

    In Memtro open Connections → SonarQube Cloud, paste the User token and the Organization key, set Instance to sonarcloud.io for the EU instance or sonarqube.us for the US one, and connect

  4. 4

    Ask whether your main project passes its quality gate. If SonarQube Cloud refuses for too many requests, wait a few minutes

Also works from

Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The SonarQube Cloud tools are the same everywhere.

FAQ

Questions

Can Memtro change anything in SonarQube Cloud?+

Only when you ask, and only what it has been granted: add a comment to a SonarQube Cloud issue; add tags to a SonarQube Cloud issue; move a SonarQube Cloud issue through its workflow (confirm, resolve, accept, false positive, reopen); assign a SonarQube Cloud issue to a user, or unassign it; replace the tags on a SonarQube Cloud issue; edit a comment on a SonarQube Cloud issue; create a SonarQube Cloud project in the organisation; replace the tags on a SonarQube Cloud project; delete a SonarQube Cloud project and its analysis history (permanent). Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.

Who can use a SonarQube Cloud connection?+

A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.

Does Memtro store my SonarQube Cloud data?+

Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.

How do I connect SonarQube Cloud?+

User token and Organization key. In SonarQube Cloud open avatar → My Account → Security, name a token under Generate Tokens and copy it. It is shown once and carries your permissions, so Memtro can change only what your user may change.

Can SonarQube Cloud start a job?+

Yes. Turn events on in the connection's Events tab on the Connections page, choose the kinds you want, and Memtro registers its address with SonarQube Cloud for you. A job set to start "When an event arrives" then runs once for each matching event, with the event as its input. The run treats the event as outside data, never as instructions, and anything the run remembers is kept as unverified.

Connect SonarQube Cloud in a few minutes

Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.

Where agents remember your company

Sign in, add a provider key, create an API key and point your tools at Memtro. It takes about five minutes.

7-day free trial · card on file, nothing charged until it ends · cancel any time