Back to Home
TheLunarCompany icon

lunar

by TheLunarCompany

Overview

The Lunar MCP Server acts as an HTTP proxy, designed to intercept, analyze, and manage API traffic within a Python environment, applying policies for caching, throttling, queueing, and collecting data for observability.

Installation

Run Command
No command provided

Environment Variables

  • TENANT_NAME
  • LUNAR_API_KEY
  • LUNAR_GATEWAY_INSTANCE_ID
  • LUNAR_PROXY_PROCESSORS_DIRECTORY
  • LUNAR_SERVER_TIMEOUT_SEC
  • LUNAR_CONNECT_TIMEOUT_SEC
  • LUNAR_SPOE_PROCESSING_TIMEOUT_SEC
  • LUNAR_TELEMETRY_SERVER_HOST
  • LUNAR_TELEMETRY_SERVER_PORT
  • LUNAR_TELEMETRY

Security Notes

The `custom_script_processor.go` explicitly allows users to define and execute arbitrary JavaScript code via the `script_text` parameter using the Goja JavaScript runtime. This feature, without robust sandboxing or strict input validation, presents a significant security risk, as malicious scripts could potentially compromise the server or access sensitive data. While other components appear to be robust Go implementations, this particular processor introduces a critical vulnerability if not handled with extreme caution.

Similar Servers

Stats

Interest Score57
Security Score3
Cost ClassLow
Stars384
Forks23
Last Update2026-01-19

Tags

HTTP ProxyAPI ManagementObservabilityTraffic ControlPolicy Enforcement