Lunar.dev

Lunar.dev is an enterprise gateway and control plane for governing AI applications, agents, APIs, and Model Context Protocol (MCP) servers. It centralizes authentication, tool discovery, access policies, and observability for agent-to-resource interactions.

• MCP governance: Lunar.dev provides a centralized catalog for vetted MCP servers, tools, and agents, helping administrators control what is available across an organization.
• Identity-based access: Requests can authenticate with user credentials, enabling resource access without exposing API keys or secrets to agents.
• Agent observability: The platform records activity lineage across the user, agent, model, MCP server, and final tool or API invocation.
• Policy enforcement: Granular, time-bound access controls and tool-specific policies restrict actions according to organizational rules.
• Tool risk review: A sandbox evaluates MCP servers for data-exposure and unsafe-execution risks before broader deployment.
• Skills and tool groups: Teams can group tools with workflow knowledge into governed skills for common agent tasks.

• Audience: Security teams, IT administrators, AI platform teams, and organizations deploying internal or third-party AI agents.
• Use cases: Establishing a governed MCP environment, limiting agent access to approved enterprise resources, auditing agent actions, and testing tools before production use.

• Deployment: Lunar.dev states that its MCP gateway can run entirely within customer infrastructure, including Docker-based local deployments and Kubernetes deployments through Helm.
• Security controls: The platform supports single sign-on, role-based access control (RBAC), audit logging, private deployment, and data loss prevention (DLP) controls.
• Authentication: The gateway supports API-key authorization and OAuth-based authentication flows for remote MCP servers.