Lunar.dev

Lunar.dev is an enterprise-grade MCP (Model Context Protocol) gateway founded in 2022 by CEO Eyal Solomon, drawing from the founders' cybersecurity expertise.

Reviewed by 7wData

On this page

Publisher review

Lunar.dev is an enterprise-grade MCP (Model Context Protocol) gateway founded in 2022 by CEO Eyal Solomon, drawing from the founders' cybersecurity expertise. It provides a unified control plane that intercepts, authenticates, and governs all AI agent invocations, targeting developers and enterprises that rely on external API dependencies. The platform addresses the accountability gap in AI adoption by offering live tracking, role-based access control (RBAC), cost policies, data loss prevention (DLP) safeguards, sandbox testing, lineage analysis, and risk evaluation. It serves companies like Bilt, Cycode, and Elementor, and is recognized as a Gartner Representative Vendor in AI and MCP Gateways (2024-2025).

The gateway operates as a centralized MCP and Skills inventory, pre-configuring and 'hardening' tools with built-in restrictions before publishing them to an internal catalog. Key capabilities include dynamic tool discovery, which implements Anthropic's progressive disclosure to load tool capabilities incrementally, preventing context overload and reducing token costs. The MCP Risk Score Engine evaluates server behavior (permissions, token usage) in total isolation before deployment, protecting against risks like rug pull, tool poisoning, and version drift. Additional features include API consumption management, real-time visibility and bottleneck detection, rate limits, throttling, and caching. The platform supports customization and private deployments within a customer's VPC, on-site, or in isolated networks.

Lunar.dev competes directly with Kong, Runlayer, IBM API Connect, and Microsoft Azure API Management. Compared to Kong, which is a broad connectivity platform offering API, AI, and event gateways under Kong Konnect, Lunar.dev focuses specifically on runtime governance with agent-level security controls. Lunar.dev differentiates with its MCP Risk Evaluation Sandbox, dynamic tool discovery, centralized inventory, and a seamless experience for non-technical users who can access AI tools without configuring credentials. The platform raised $6.0M in a seed round led by Uncork Capital.

The honest trade-offs include limited direct user feedback in provided sources, a relatively young company (founded 2022) with a smaller ecosystem compared to established competitors like Kong. The pricing is not explicitly stated for the MCP gateway itself, but related products start at $83/month for IBM API Connect and $0.042 per 10,000 calls for Microsoft Azure API Management. The platform's deep focus on MCP governance may be overkill for teams needing only basic API management. Additionally, the MCP Risk Score Engine is currently in early beta access, meaning some advanced features are not yet generally available.

Get the AI & data signal, daily.

48k+ subscribers read this every morning. One email, both newsletters. Unsubscribe anytime.

How it works

  1. Unified MCP Gateway

    Intercepts, authenticates, and governs all AI agent invocations in real-time, enforcing policies across enterprise systems.

  2. MCP Risk Score Engine

    Evaluates server behavior (permissions, token usage) in isolation before deployment, protecting against rug pull and tool poisoning.

  3. Dynamic Tool Discovery

    Implements progressive disclosure to load tool capabilities incrementally, preventing context overload and reducing token costs.

  4. Centralized MCP and Skills Inventory

    Maintains a shared catalog of approved MCP servers and Skills, ensuring consistent governed access across the organization.

  5. Sandbox Testing

    Tests server behavior in total isolation before deployment, protecting against security risks like version drift.

  6. Real-Time Visibility and Bottleneck Detection

    Provides live tracking of tool invocations, RBAC, cost policies, and DLP safeguards with rate limits and throttling.

  7. API Consumption Management

    Manages API usage with caching, rate limits, and throttling to ensure optimal uptime and response times.

Strengths and trade-offs

Strengths

  • Focused on secure and governed tool access with a unified control plane for LLMs, MCP tools, and APIs.
  • Provides live tracking, RBAC, cost policies, DLP safeguards, sandbox testing, lineage analysis, and risk evaluation.
  • Centralized MCP and Skills inventory pre-configures and hardens tools with built-in restrictions before publishing.
  • Dynamic tool discovery reduces token costs by loading tool capabilities incrementally, preventing context overload.

Trade-offs

  • Limited direct user feedback in provided sources, making it hard to assess real-world reliability.
  • Relatively young company (founded 2022) with a smaller ecosystem compared to established competitors like Kong.
  • Pricing is not explicitly stated for the MCP gateway, with only related product prices available ($83/month for IBM API Connect).
  • MCP Risk Score Engine is currently in early beta access, meaning some advanced features are not yet generally available.

Pricing context

Not explicitly stated for the MCP gateway; related products start at $83/month for IBM API Connect and $0.042 per 10,000 calls for Microsoft Azure API Management. A free trial is available.

Getting started with Lunar.dev

  1. Sign up for Lunar.dev

    Go to the Lunar.dev website and create an account. Provide your email and set a password, or use a single sign-on option if available. Complete the registration to access the dashboard.

  2. Connect your MCP servers

    In the dashboard, navigate to the MCP inventory section. Add your MCP server endpoints by entering their URLs and authentication credentials. Lunar.dev will automatically discover and catalog the available tools.

  3. Configure access policies

    Define role-based access control (RBAC) rules for each tool. Set cost limits, data loss prevention (DLP) rules, and rate limits. Use the policy editor to restrict tool usage based on user roles and departments.

  4. Test tools in sandbox

    Before deploying, use the sandbox testing feature to evaluate each MCP server's behavior. Run isolated tests to check permissions, token usage, and security risks. Review the risk score report and adjust policies as needed.

  5. Deploy and monitor usage

    Publish the approved tools to your internal catalog. Monitor real-time invocations, track bottlenecks, and review cost consumption on the dashboard. Adjust throttling and caching settings to optimize performance.

Frequently Asked Questions

What is Lunar.dev and what does it do?

Lunar.dev is an enterprise MCP gateway founded in 2022 that intercepts, authenticates, and governs AI agent invocations. It provides a unified control plane with live tracking, RBAC, cost policies, and DLP safeguards for developers and enterprises relying on external APIs.

How does Lunar.dev's MCP Risk Score Engine work?

The MCP Risk Score Engine evaluates server behavior like permissions and token usage in total isolation before deployment. It protects against risks such as rug pull, tool poisoning, and version drift. This feature is currently in early beta access.

What is dynamic tool discovery in Lunar.dev?

Dynamic tool discovery implements Anthropic's progressive disclosure to load tool capabilities incrementally. This prevents context overload and reduces token costs by only activating tools as needed, optimizing performance for AI agent interactions.

How does Lunar.dev compare to Kong?

Lunar.dev focuses specifically on runtime governance with agent-level security controls for MCP, while Kong is a broad connectivity platform offering API, AI, and event gateways. Lunar.dev differentiates with its MCP Risk Evaluation Sandbox and centralized inventory.

What pricing options does Lunar.dev offer?

Pricing for the MCP gateway is not explicitly stated, but related products like IBM API Connect start at $83 per month. Lunar.dev offers a free trial. The company raised $6.0 million in seed funding from Uncork Capital.

What are the main weaknesses of Lunar.dev?

Lunar.dev is a young company founded in 2022 with a smaller ecosystem than established competitors. The MCP Risk Score Engine is in early beta, and pricing is not clearly stated. Limited user feedback makes real-world reliability hard to assess.

Alternatives

How Lunar.dev compares

Direct head-to-head against 3 competitors. Picked by 7wData.

This tool

Lunar.dev

Pricing
Not explicitly stated for the MCP gateway; related products start at $83/month for IBM API Connect and $0.042 per 10,000 calls for Microsoft Azure API Management. A free trial is available.
Target
Lunar.dev is an enterprise-grade MCP (Model Context Protocol) gateway founded in 2022 by CEO Eyal Solomon, drawing from the founders' cybersecurity expertise.
Strength
Focused on secure and governed tool access with a unified control plane for LLMs, MCP tools, and APIs.
Watch for
Limited direct user feedback in provided sources, making it hard to assess real-world reliability.

TrueFoundry

Pricing
Custom/Contact sales
Target
Teams needing an end-to-end AI infrastructure platform including model serving and fine-tuning
Deployment
Self-hosted via Kubernetes
Strength
Unified platform for MCP gateway, LLM gateway, model serving, and fine-tuning
Watch for
MCP gateway is one feature in a broader platform, may lack depth in MCP-specific governance

Docker

Pricing
Free tier; Pro $5/month; Team $9/user/month; Business $15/user/month
Target
Developers seeking containerized MCP server deployment and management
Deployment
Self-hosted or Docker Desktop
Strength
Ubiquitous container platform with broad MCP server packaging and distribution
Watch for
Not a dedicated MCP gateway; lacks built-in RBAC, audit trails, and centralized governance

Microsoft Azure

Pricing
Pay-as-you-go; API Management tiers from $0.10/1K calls to custom enterprise
Target
Enterprises already on Azure needing API Management with MCP gateway capabilities
Deployment
Cloud or hybrid via Azure Arc
Strength
Deep integration with Entra ID for RBAC and existing Azure enterprise tooling
Watch for
Complex setup and pricing escalation; MCP support is an add-on to API Management, not a native gateway

User reviews

No user reviews yet. Be the first to write one.

Sources

Reporting on this tool draws on these publicly available sources.

  1. lunar.dev
  2. www.lunar.dev
  3. www.lunar.dev
  4. www.lunar.dev