Features Overview

Bob the Fixer is an intelligent MCP (Model Context Protocol) server that brings enterprise-grade code quality analysis to AI assistants.

Core Capabilities

Automated Code Analysis

Bob the Fixer integrates with SonarQube to provide comprehensive code analysis:

Analysis Type	What It Detects
Bugs	Logic errors, null pointer issues, resource leaks
Vulnerabilities	SQL injection, XSS, insecure configurations
Code Smells	Complex code, duplications, maintainability issues
Security Hotspots	Code requiring security review

AI-Assisted Fixing

Through the MCP protocol, AI assistants can:

1. Scan projects automatically with a single command
2. Analyze issues with full context and rule explanations
3. Fix problems using the AI's code editing capabilities
4. Verify fixes by re-scanning the project

20 MCP Tools

Bob the Fixer exposes 20 specialized tools organized by function:

Category	Tools	Purpose
Scanning	2	Project scanning and auto-setup
Analysis	4	Issue details, patterns, security hotspots
Metrics	4	Quality gate, technical debt, coverage
Duplication	2	Code duplication analysis
Reporting	1	Comprehensive quality reports
Management	7	Project configuration and maintenance

Key Features

Intelligent Project Discovery

Automatically detects:

• Languages: JavaScript, TypeScript, Java, Python, Go, Rust, C#
• Frameworks: React, Vue, Angular, Next.js, Express, Spring Boot
• Build Tools: npm, Maven, Gradle, pip, Poetry, Cargo
• Package Managers: npm, yarn, pnpm, pip, pipenv

Learn more: Project Discovery

Quality Gate Management

Three pre-configured quality gate templates:

Template	Use Case	Coverage Threshold
Strict	Production code	80%+
Balanced	Most projects	60%+
Permissive	Legacy codebases	No minimum

Learn more: Quality Gates

Deep SonarQube Integration

Full integration with SonarQube APIs:

• Issue tracking and management
• Rule information with code examples
• Technical debt calculation
• Coverage gap analysis
• Security hotspot review

Learn more: SonarQube Integration

Multi-AI Support

Works with multiple AI assistants:

CLI Tool	MCP Support	Status
Claude Code	Native CLI	Fully Supported
GitHub Copilot CLI	Native CLI	Fully Supported
Gemini CLI	Native CLI	Fully Supported
OpenAI Codex CLI	Native CLI	Fully Supported

Learn more: AI-Assisted Fixing

Architecture

┌─────────────────────────────────────────────────────────┐
│                    AI Assistant                         │
│            (Claude, Copilot, Gemini, OpenAI)           │
└────────────────────────┬────────────────────────────────┘
                         │ MCP Protocol
                         ▼
┌─────────────────────────────────────────────────────────┐
│              Bob the Fixer MCP Server                   │
│  ┌─────────────────────────────────────────────────┐   │
│  │              Tool Router (20 tools)              │   │
│  └─────────────────────────────────────────────────┘   │
│  ┌──────────────┐ ┌──────────────┐ ┌──────────────┐   │
│  │   Scanning   │ │   Analysis   │ │  Reporting   │   │
│  │  Orchestrator│ │   Services   │ │  Generator   │   │
│  └──────────────┘ └──────────────┘ └──────────────┘   │
│  ┌─────────────────────────────────────────────────┐   │
│  │            Project Manager / Config              │   │
│  └─────────────────────────────────────────────────┘   │
└────────────────────────┬────────────────────────────────┘
                         │ HTTP/REST
                         ▼
┌─────────────────────────────────────────────────────────┐
│                  SonarQube Server                       │
│              (Containerized with PostgreSQL)            │
└─────────────────────────────────────────────────────────┘

Workflow Example

Security Features

• Rate Limiting: 60 requests/minute per client
• Input Sanitization: Path traversal and injection prevention
• Token Encryption: AES-256 encryption for stored tokens
• Secure Defaults: HTTPS, no anonymous access

Performance

Metric	Value
Scan timeout	300 seconds
Health check interval	30 seconds
Rate limit	60 req/min
Supported file size	No hard limit

Next Steps

• Project Discovery - How auto-detection works
• SonarQube Integration - Deep dive into SonarQube features
• Quality Gates - Configure quality thresholds
• AI-Assisted Fixing - AI integration details