Lunar.dev

• Boomi could retire the standalone Lunar.dev plans once the gateway is fully inside Boomi Connect, leaving buyers to purchase the wider platform instead.
• Docker and IBM publish their own MCP gateways under permissive open-source licences, which caps what an independent gateway can charge for the same base features.
• The MIT-licensed core lets a customer's platform team run the gateway unpaid indefinitely, capping conversion from the free plan to a paid one.
• The gateway's named proof is vendor-published testimonials, and no customer outside those pages confirms how deeply it is deployed.

Lunar.dev sells against a supervision gap. Its homepage states the problem as an accountability gap, with no reliable way to answer who used which agent, which tool, and what data was accessed. It also names over-privilege, where agents run with more access than the person who started the task, and it puts a gateway between agents and everything they call.

The company did not start here. It was founded in 2022 to manage third-party API consumption, the cost problems TechCrunch described when it covered the $6 million seed in November 2023. Lunar.dev re-aimed the same proxy in front of outbound traffic at a security problem with a different buyer.

That buyer is the enterprise security team. The security page pitches one immutable record per interaction, joining the tool call, the model prompt and the downstream API request into a single timeline. It lists native export to Splunk, Datadog, Elastic and S3. That is language addressed to the people who answer audit questions rather than to the platform engineers who bought API cost control. [s1, s7, s3, s8]

Lunar MCPX is the lead product, a self-hosted gateway that aggregates an organization's MCP servers behind one endpoint, scopes tools to specific agents, teams or workflows, and logs every action. The documentation lists OAuth authentication, tool groups, audit logs and a stated 4ms p99 gateway overhead, and the pricing page adds a private MCP server registry, secrets management with vault integration and a risk dashboard to the enterprise plan.

Two more products share the same architecture. The Lunar AI Gateway routes model traffic across providers with token budgets, rate limits and usage observability. The original API consumption gateway is still sold for outbound third-party API traffic.

The core gateway is open source under an MIT licence, and the repository was still taking code changes in August 2026. Public documentation covers deployment from a Docker quick start onward, and the pricing page caps its free plan at 50 users. [s5, s12, s6, s4, s24]

The MCP gateway field is crowded, and Lunar.dev engages it directly. Its site navigation lists comparisons against TrueFoundry, Kong, Runlayer and Obot.

Rival gateways are open source. Docker publishes an MIT-licensed MCP gateway and IBM an Apache-licensed one, and an independent comparison lists both alongside Obot and Lunar MCPX as self-hosted options a platform team still has to run, monitor and harden itself.

Analyst placement spans both of its categories, and the vendor is the one displaying it. Lunar.dev's own site says Gartner named it a Representative Vendor in AI Gateways for 2024 and 2025 and in MCP Gateways for 2025. Independent evaluation is thinner. A hands-on comparison by Manveer Chawla groups MCPX with a developer-workstation tool rather than with the enterprise gateways, and its author discloses that his firm does content marketing for a rival. [s1, s22, s23, s19]

The case-study library belongs to the earlier product. The BitDam, HiredScore and Postscript studies describe API consumption work, and Lunar.dev published all of them. The gateway's named proof is one testimonial that names MCPX, from HiBob's chief information security officer, who credits it with governing MCP usage across the business, next to a broader endorsement from HiredScore's security lead.

The motion is open-source-led and founder-fronted. A free plan for small teams and an MIT-licensed core seed adoption, public documentation supports self-serve evaluation, and a Nordic APIs article on who should own API consumption carries the chief executive's name. One post on the company's blog carries a head of sales byline.

Recognition signals come through the vendor's own announcements: a Premier Build Partner place in Google Cloud Partner Advantage, a Gartner Hype Cycle for APIs mention in 2024, and a Globee technology award. The $6 million seed led by Uncork Capital is the company's disclosed funding, and TechCrunch covered it in November 2023, though Calcalist dates the investment itself to February 2023. [s10, s1, s4, s21, s11, s7, s8, s2]

The founding team is domain-adjacent. Eyal Solomon and Roy Gabbay started the company in 2022, and Calcalist's interview records Roy's decade of cloud engineering and group management at cybersecurity companies including Check Point, alongside Eyal's decade in cyber tools, product management and sales.

The company stayed small. TechCrunch counted eight employees across Tel Aviv and San Francisco when it covered the seed in November 2023, and Calcalist's interview from the same round records the same headcount. The about page now lists roles beyond the founders, among them a product lead, a senior director of marketing and a developer-relations lead.

Boomi's purchase, reported complete by late July 2026, is an acquisition outcome in the same domain for the company they founded. The cited biographies describe operating roles and say nothing about earlier exits. [s8, s7, s2, s16, s17]

Lunar.dev states on its security page that it is SOC 2 Type II certified, and it sells trust as a feature. Immutable audit trails, identity attribution, PII redaction and secret management are positioned as the controls a customer needs for its own SOC 2, GDPR, HIPAA and PCI DSS programs.

The attestation is a statement rather than a reviewable artifact. No inspectable trust portal appears on the probed surfaces, so a buyer cannot read the attestation online. The same page sells audit readiness to security teams, so the artifact the record lacks is the one its own pitch invites a buyer to ask for. [s3, s14]

Add analyzed competitors to compare them side by side with Lunar.dev.

Lunar.dev aims at enterprises adopting AI agents, and its security page speaks to two groups inside them. Security teams get the pitch for one audit trail across tool, model and API traffic, and the platform teams that deploy the gateway get the self-hosted, VPC and air-gapped options that suit buyers who cannot route agent traffic through a vendor's cloud.

The segmentation carries history. The company was founded in 2022 and entered the market in 2023 selling API consumption management to engineering teams worried about third-party API costs and rate limits, and its deepest named references still describe that work. The move toward security buyers is recent, and the gateway's public backing is a short vendor-published testimonial from HiBob's security chief rather than a full case study.

Boomi's purchase leaves that segmentation intact for now. Boomi says the gateway will become a component of Boomi Connect, its managed service for connecting AI tools to enterprise applications, which is a plan rather than a shipped change. No deployment under that plan appears in the cited record, so the buyer the product sells to today is still the one above.

The capability set centers on Lunar MCPX, a self-hosted gateway that aggregates an organization's MCP servers behind one endpoint and applies per-agent access control, OAuth authentication, tool-level policies and audit logging. Enterprise features add a private MCP registry, dedicated gateway clusters per identity, an agent inventory, a usage dashboard, an evaluation sandbox for testing server behavior before deployment, and identity-provider integration. The vendor says the gateway injects credentials from the customer's own vault at request time, so secrets never sit in the gateway and never reach the agent.

Two adjacent modules extend the same architecture. The Lunar AI Gateway routes model traffic across providers with token budgets, rate limits and usage observability. The gateway also performs automated risk analysis that identifies safety and compliance concerns, the company says, and pairs it with sandbox evaluation before a server reaches production.

A gateway that carries agent-to-tool traffic for many customers could in principle accumulate cross-customer risk baselines for MCP servers that no single tenant could assemble. The cited record does not evidence such an asset, and the vendor says only anonymized metrics leave the customer's network.

The go-to-market is open-source-led, and the marketing is founder-fronted. The MIT-licensed core and a free plan the pricing page caps at 50 users seed adoption, public documentation supports self-serve evaluation, and a Nordic APIs article on who should own API consumption carries the chief executive's name. One post on the company's blog carries a head of sales byline.

The published customer proof trails the newer pitch. The case studies, BitDam, HiredScore and Postscript, describe API consumption wins, while the gateway's named evidence is one testimonial that names MCPX, from HiBob's chief information security officer, who credits it with governing MCP usage across the business, next to a broader endorsement from HiredScore's security lead.

Recognition signals arrive through the vendor's own pages: the Gartner category listings, a Premier Build Partner place in Google Cloud Partner Advantage, and a Globee technology award. The outside event that carries independent weight is the sale itself, which Techzine and Constellation Research both covered.

Lunar.dev publishes three plans: a free plan on a shared instance capped at 50 users, a Pro plan capped at 100 users, and a custom enterprise plan labeled licensed per seat and fully self-hosted. Publishing the tiers and the user thresholds gives a buyer a self-qualification path that an enterprise-only vendor withholds.

The unit choice is telling. A gateway could charge by traffic volume, but the enterprise plan is licensed per seat, with the seat left undefined on the page, which matches what a security buyer values, accountability per user, rather than the infrastructure cost a platform team watches. No dollar amounts appear on the page, so the enterprise price is set in a sales conversation.

Delivery centers on self-hosting. The gateway runs inside the customer's own infrastructure, with identity from Okta or Entra, secrets from the customer's vault and logs to the customer's SIEM, and the vendor says only anonymized metrics ever leave that network. It can also run entirely on premises or in an air-gapped environment, which shifts the operational burden onto the buyer.

That burden shows up in the one independent comparison in the cited record. Manveer Chawla concludes from documentation and user reports that MCPX has the right open-source primitives for centralized governance but that the available independent reports describe a product that still needs hardening. His hands-on test stopped short, because the identity features are available only under the paid plan. He discloses that his firm does content marketing for a rival gateway vendor, so the account is independent of Lunar.dev and not disinterested.

Lunar.dev states on its security page that it is SOC 2 Type II certified, and it sells trust features as product. Immutable audit trails, identity attribution, PII redaction and secret management are framed as the controls a customer needs for its own SOC 2, GDPR, HIPAA and PCI DSS programs.

No inspectable trust portal appears on the probed surfaces, so the certification is a statement rather than a reviewable artifact. Audit logs export natively to Splunk, Datadog, Elastic and S3, which grounds the compliance-enablement pitch in concrete integrations a buyer can check against its own stack.

The product is itself an ecosystem play. MCPX exists to aggregate other vendors' MCP servers, and its value grows with the number of servers and clients it governs. The open-source release ships a standard catalog of pre-vetted public MCP servers, and the documentation lists an OpenAI Agent Builder integration among enterprise features, which ties the gateway to a major agent platform.

Around the core, the company exports audit data to the SIEM tools security teams already run and announces a Premier Build Partner place in Google Cloud Partner Advantage. The open-source core invites community contribution, and the GitHub API reported 483 stars and 44 forks on 2026-08-27, against 1,544 stars on Docker's gateway repository and 4,374 on IBM's.

The acquirer's platform is the ecosystem the gateway is headed for. Boomi says its capabilities will become a key component of Boomi Connect, and that service is the acquirer's own product rather than an extension of what Lunar.dev built. The cited record documents the intent and no released integration.

Co-founders Eyal Solomon, chief executive, and Roy Gabbay, chief technology officer, started the company in 2022. Calcalist's interview records Roy's decade as a cloud engineer and group manager at cybersecurity companies including Check Point, and Eyal's decade in cyber tools, product management and sales. The cybersecurity pedigree predates the security pitch, which makes the repositioning credible.

The company reported eight employees in 2023, when TechCrunch covered the seed in November, and Calcalist dates that investment to February 2023. The about page now lists roles beyond the two founders, among them a product lead, a senior director of marketing and a developer-relations lead, and the cited record states no current headcount. The company runs three product lines, an open-source project and the SLA-backed support its documentation promises enterprise customers.

Boomi's purchase, reported complete by late July 2026, is an acquisition outcome in the same domain for the company they founded. The cited biographies describe operating roles and say nothing about earlier exits.