lunar
Enforces governance and security policies at the MCP gateway layer, reducing risk of unauthorized agent behavior and data exposure without requiring applicat…
Lunar.dev is an open-source platform for managing, governing, and optimizing third-party API consumption across applications and AI agent workloads. It has two components: Lunar Proxy, an API gateway that applies policy enforcement, rate limits, retries, and traffic shaping to outbound API and LLM calls; and Lunar MCPX, a zero-code aggregator that consolidates multiple MCP servers behind a single gateway with unified access. It deploys as infrastructure (Docker), not as a Claude Code skill.
- Block agent access to PII databases based on request classification
- Enforce rate limits and quota policies per model or team
- Log and monitor all external API calls for compliance audits
Enforces governance and security policies at the MCP gateway layer, reducing risk of unauthorized agent behavior and data exposure without requiring application-level rewrites.
Engineering teams deploying autonomous agents who need centralized policy enforcement and audit visibility across multiple agent instances.
https://github.com/TheLunarCompany/lunar
By TheLunarCompany
How to Get It
See repository README — Lunar Proxy and Lunar MCPX each ship their own Docker-based setup guides (docs.lunar.dev)
Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.
After installing, paste this into Claude:
Help me block agent access to PII databases based on request classification
Trust Signals Reviewed
Community Pulse Growing
Discussed on Reddit
- NASA joins a host of nations and companies that want to go to the lunar surface — Reddit · 25069 pts
- A British company plans to send spider robots to the moon in 2021. They will eve — Reddit · 12143 pts
- Bell Labs, which is now owned by Nokia, and British telecoms company Vodafone ar — Reddit · 9832 pts
3 mentions across 1 sources
Reviewer notes
Reviewed review. These are observations, not a security certification.
Auto-assessment from April sweep — baseline scores pending hands-on review.
2026-04-18: Approved in April sweep: Solid community adoption with a clear description and active maintenance.
Things to check
- Requires MCP-compatible agents and adds a network hop, introducing latency and potential single points of failure. Policy configuration is custom and non-trivial; expect engineering effort to tune for your threat model. Open-source core is free for non-production/personal use; production environments use paid platform tiers.
How to evaluate tools before deploying →
Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.