Lunar.dev gives enterprises one control point for how employees, applications and AI agents use MCP servers, large language models and third-party APIs. Security and platform teams use it to decide which MCP servers and tools are allowed, who and what can call them, and to keep a full record of every agent action, without slowing down the people building with AI.
The company is now part of Boomi, and its technology is becoming part of the Boomi Enterprise Platform, including Boomi Connect, a managed MCP server offering.
At A Glance
| Vendor | Lunar.dev (part of Boomi) |
|---|---|
| Category | AI gateway and MCP gateway |
| Identities covered | Users, AI agents, API keys and OAuth tokens |
| Deployment | Self-hosted with Docker or Kubernetes (Helm chart) |
| Agentic AI | MCP Gateway, agent inventory, Skills |
| Customers | HiBob, HiredScore, Elementor, Cycode, Bilt |
| Market classification | Application Security; also Agentic AI Identity |
What Lunar.dev Does
As AI use spreads, employees, applications and agents connect to MCP servers and models in many different ways, each with its own credentials. Lunar.dev’s answer is a single path: all AI traffic, whether an agent calling an MCP tool or an application calling a model, passes through a gateway where it can be authenticated, scoped, routed and logged. Every action can then be tied back to a person and an agent. In Boomi’s platform the combined offering is presented as an AI Gateway with three components: LLM Gateway, MCP Gateway and Skills.
Products
MCP Gateway (MCPX)
MCPX is for security teams that need to let employees and agents use MCP while keeping control of which servers and tools are in play. It aggregates many MCP servers behind a single endpoint, with no code changes, and adds the controls an enterprise needs:
- an admin-vetted MCP catalog, plus a Custom MCP Server Catalog that follows Anthropic’s MCP Registry specifications
- automated risk analysis of each server for safety and compliance concerns, and sandbox testing before production
- tool hardening, such as rewriting tool descriptions, hardening parameters and limiting which actions are exposed
- intent-aware, time-bound access controls
- profiles for approved servers and users, and tool groups
AI Gateway
The AI Gateway (LLM Gateway) is the central route for model traffic. It sends requests across model providers based on cost and latency, applies identity-aware routing, and gives the organisation one place to control LLM and API use.
Agent Governance
Agent Governance answers the question of which person, through which agent, did what. It keeps an inventory of agents and maps every action to a verified user identity, tracing lineage across user, agent, model, MCP server and tool or API call. Immutable, real-time audit logs record all agent activity, and DLP and sensitive data controls apply to agent traffic.
Skills
Skills combine workflow knowledge with tools drawn from several MCP servers into a single capability an agent can use. Authentication, role-based access control, audit and versioning apply to each Skill as they do to individual tools.
Lunar Proxy And Open Source
Lunar Proxy is the core API gateway and control layer that the platform grew from. It is published as an open-source project under the MIT licence for managing, governing and optimising how applications and agents consume third-party APIs. An API Egress Proxy is in Beta.
How It Works
The platform is fully self-hosted, run locally with Docker or in the customer’s own Kubernetes cluster from a Helm chart. With the Enterprise option no data leaves the customer’s VPC.
| Component | What it does |
|---|---|
| Request path | Users and agents connect to one MCP Gateway endpoint instead of to individual servers. The gateway checks authentication and per-user or per-agent permissions, then forwards permitted tool calls to the MCP server. |
| Credentials | Secrets, API keys and OAuth tokens are held centrally, so users authenticate without ever seeing the keys. Supported methods include API keys, standard OAuth and static OAuth flows such as Client Credentials or Device Flow. |
| Visibility | Activity is exported through OpenTelemetry for viewing in Grafana, and admins sign in to the admin panel through SSO. |
Identities And Systems Covered
| Human users | Employees using MCP servers and models through the gateway |
|---|---|
| AI agents | Each agent in the inventory, with its own scoped permissions |
| Secrets and credentials | API keys, OAuth tokens and server tokens assigned to users |
| Systems | MCP servers, LLM providers and third-party APIs |
Company Background
| Founded | 2022, by Eyal Solomon and Roy Gabbay |
|---|---|
| Headquarters | New York, United States, with staff in Tel Aviv and San Francisco |
| Leadership | Eyal Solomon (co-founder and CEO) and Roy Gabbay (co-founder and CTO) |
| Funding | A $6 million seed in November 2023 led by Uncork Capital with Angular Ventures; other backers include DarkMode Ventures, Irregular Expressions VC and OperAngels |
| Acquisition | Acquired by Boomi, with the deal closed in July 2026 |
| Recognition | Included by Gartner as a representative vendor for AI Gateways (2024, 2025) and MCP Gateways (2025) |
Note: This overview is compiled from Lunar.dev’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.