All servers

lunar

TypeScript

TheLunarCompany

lunar.dev: Agent native MCP Gateway for governance and security

★ 458Pushed 6/19/2026View on GitHub
69

Score Breakdown

Authentication30/30
Static Analysis25/25
Dependencies4/20
Behavior0/15
Maintenance10/10

Authentication

Tier A — OAuth 2.0 / OIDC

Full OAuth 2.0 with authorization code flow, PKCE, or OIDC. Best-in-class authentication.

Last scanned 6/17/2026

Security Findings(149)

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/environment.py:39

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/environment.py:91

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:92

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:93

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:94

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:95

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:165

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:177

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:184

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:191

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:199

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:206

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:210

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:225

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:229

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:237

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:238

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:246

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:247

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:259

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:261

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:270

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/common.py:273

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:209

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:210

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:212

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:213

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:217

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:218

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:233

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:234

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:236

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:237

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:241

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:242

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:251

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:257

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:263

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:269

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:275

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:284

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:292

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:300

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:308

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:315

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:318

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:333

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_har_exporter.py:344

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:85

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:96

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:102

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:108

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:118

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:122

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:142

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:160

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:170

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:174

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:194

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:204

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:208

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:225

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/diagnosis_traffic_metrics.py:232

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:108

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:117

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:139

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:146

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:148

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:169

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:175

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/discovered_endpoint_metrics.py:177

LOW

Consider possible security implications associated with the subprocess module.

./proxy/integration-tests/features/steps/flow.py:7

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/flow.py:94

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/flow.py:100

LOW

Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell

./proxy/integration-tests/features/steps/flow.py:100

LOW

Starting a process with a partial executable path

./proxy/integration-tests/features/steps/flow.py:100

LOW

Starting a process with a partial executable path

./proxy/integration-tests/features/steps/flow.py:108

LOW

subprocess call - check for execution of untrusted input.

./proxy/integration-tests/features/steps/flow.py:108

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/flow_filter.py:38

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/flow_rate_limit.py:122

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/flow_rate_limit.py:125

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/graceful_shutdown.py:56

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/graceful_shutdown.py:66

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:24

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:44

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:50

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:72

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:78

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/lunar_hub.py:100

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:108

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:109

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:111

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:113

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:123

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:124

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:127

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/managed_endpoints.py:129

LOW

Consider possible security implications associated with the subprocess module.

./proxy/integration-tests/features/steps/policies_reload.py:7

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/policies_reload.py:46

LOW

Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell

./proxy/integration-tests/features/steps/policies_reload.py:46

LOW

Starting a process with a partial executable path

./proxy/integration-tests/features/steps/policies_reload.py:46

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/policies_reload.py:53

LOW

Starting a process with a shell: Seems safe, but may be changed in the future, consider rewriting without shell

./proxy/integration-tests/features/steps/policies_reload.py:53

LOW

Starting a process with a partial executable path

./proxy/integration-tests/features/steps/policies_reload.py:53

LOW

Starting a process with a partial executable path

./proxy/integration-tests/features/steps/policies_reload.py:74

LOW

subprocess call - check for execution of untrusted input.

./proxy/integration-tests/features/steps/policies_reload.py:74

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/policies_reload.py:81

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:331

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:332

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:341

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:342

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:351

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:361

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:363

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/proxy_mode.py:375

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_account_orchestration.py:68

LOW

Possible hardcoded password: 'BasicValue'

./proxy/integration-tests/features/steps/remedy_authentication.py:37

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_authentication.py:73

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_authentication.py:75

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_authentication.py:94

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_authentication.py:97

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_authentication.py:110

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_cache.py:99

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_cache.py:101

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_concurrency_based_throttling.py:80

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_early_reponse.py:54

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_early_reponse.py:55

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:124

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:125

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:134

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:135

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:144

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:145

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:187

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_response_based_throttling.py:193

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_stats.py:31

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_stats.py:37

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_stats.py:38

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:129

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:130

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:205

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:208

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:233

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:234

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:251

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_queue.py:271

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_throttling.py:334

LOW

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.

./proxy/integration-tests/features/steps/remedy_strategy_based_throttling.py:345

LOW

Possible hardcoded password: 'LunarProxySecretAccessKey'

./proxy/integration-tests/utils/consts.py:46

Tools(1)

whoami

Returns the identity of the authenticated user from the JWT token passed in _meta.

Claude Desktop Config

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "lunar": {
      "command": "npx",
      "args": [
        "-y",
        "https://github.com/TheLunarCompany/lunar"
      ]
    }
  }
}

Refer to the repo README for exact installation instructions.