Lunara

io.github.DarkMatteros/lunaraDarkMatterosstreamable-httpv1.0.0Scanned 39 minutes ago

Subtitle engine for AI agents: one upload gives a written track and a translation, timings exact.

18 tools: 10 change things and 8 only read.

Reads private data · 1
Reads text others write · 4
Can send data out · 0
1 finding

Anlyon alternative

10 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Changes things 10Creates or changes something that can be changed back.Claude Code: ask

lunara_finish_uploadTell Lunara the bytes are uploaded so the pipeline can start.No findings
Why it is in this group
- The name "lunara_finish_upload" says "upload": a word for a change.
Description, as the server wrote it
Tell Lunara the bytes are uploaded so the pipeline can start. Returns the job id to poll with lunara_get_job.
Annotations the server declares
- title: Finish an upload
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_qa_contractRun the contract gate over both tracks: ASR text and timings byte-exact, cue length bounds, no empty cues.1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "lunara_qa_contract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "run": a word for a change.
  What this check looks for
Description, as the server wrote it
Run the contract gate over both tracks: ASR text and timings byte-exact, cue length bounds, no empty cues. Returns pass/fail per rule. Free, because refusing a broken track should never cost the caller money.
Annotations the server declares
- title: Check the subtitle contract
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_readabilityPer-cue reading speed, displayed length and characters-per-second, with the cues that exceed comfortable limits.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Per-cue reading speed, displayed length and characters-per-second, with the cues that exceed comfortable limits. Mirrors the metrics shown in the editor.
Annotations the server declares
- title: Readability report
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_rewriteTurn spoken Cantonese cue text into written Chinese.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn spoken Cantonese cue text into written Chinese. Every cue boundary and timestamp is preserved. Deliberate mispronunciations are never corrected, and proper nouns are protected.
Annotations the server declares
- title: Rewrite spoken → written
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 3
lunara_segmentApproximate split, not audio-grounded segmentation: cue text is divided at clause punctuation and each piece receives a share of the original span proportional to its character cou…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Approximate split, not audio-grounded segmentation: cue text is divided at clause punctuation and each piece receives a share of the original span proportional to its character count. The words are not changed. Timings are estimated, so treat them as a reading aid rather than a re-alignment — use lunara_start_subtitle_job if you need timing derived from the audio.
Annotations the server declares
- title: Split cues at punctuation
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 1
lunara_start_subtitle_jobRun the full eight-layer subtitle pipeline on an audio or video URL you can already host.Reads text others writeNo findings
Why it is in this group
- The name "lunara_start_subtitle_job" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Run the full eight-layer subtitle pipeline on an audio or video URL you can already host. Produces a written-language track and a translated track. Prefer lunara_upload_video when the file is local.
Annotations the server declares
- title: Start a subtitle job from a URL
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- lunara/costMinutes: 5
lunara_subtitle_from_urlStart a persisted subtitle job from a URL you already host — no upload needed.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start a persisted subtitle job from a URL you already host — no upload needed. Returns a job id; poll lunara_get_job every 15–30 s until status is "completed", then call lunara_get_srt. Prefer this over lunara_upload_video whenever the media is reachable by URL.
Annotations the server declares
- title: Subtitles from a URL
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- lunara/costMinutes: 5
lunara_transcribeRun speech recognition only — no rewrite, no translation.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "run": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Run speech recognition only — no rewrite, no translation. Returns timed segments. Use this when you want the transcript itself, or when you plan to pick a later stage yourself.
Annotations the server declares
- title: Transcribe audio
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- lunara/costMinutes: 3
lunara_translateTranslate the text of an existing job’s cues into another language.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Translate the text of an existing job’s cues into another language. Every cue boundary and timestamp is preserved; only the text changes. Use this instead of translating yourself so the timing contract holds.
Annotations the server declares
- title: Translate a cue list
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 3
lunara_upload_videoReserve an upload slot and return the object key plus a signed URL per part.No findings
Why it is in this group
- The name "lunara_upload_video" says "upload": a word for a change.
Description, as the server wrote it
Reserve an upload slot and return the object key plus a signed URL per part. After uploading the bytes call lunara_finish_upload. Use this for a file you hold locally.
Annotations the server declares
- title: Upload a video for subtitling
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- lunara/costMinutes: 5

Only reads 8Looks things up and changes nothing.Show 8 read-only tools

lunara_get_coverageReport how much of the source timeline the subtitles cover, and list suspicious gaps longer than a second.No findings
Why it is in this group
- The name "lunara_get_coverage" says "get": a word for reading.
Description, as the server wrote it
Report how much of the source timeline the subtitles cover, and list suspicious gaps longer than a second. Use before shipping a long video.
Annotations the server declares
- title: Delivery coverage
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_get_glossaryReturn the proper nouns Lunara has learned for this org, so names are spelled consistently across tracks.No findings
Why it is in this group
- The name "lunara_get_glossary" says "get": a word for reading.
Description, as the server wrote it
Return the proper nouns Lunara has learned for this org, so names are spelled consistently across tracks.
Annotations the server declares
- title: Get the project glossary
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_get_jobReturn the state of a subtitle job: status, progress, whether the SRT is ready, and how many cues it has.No findings
Why it is in this group
- The name "lunara_get_job" says "get": a word for reading.
Description, as the server wrote it
Return the state of a subtitle job: status, progress, whether the SRT is ready, and how many cues it has. Poll this after lunara_upload_video.
Annotations the server declares
- title: Get subtitle job
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_get_srtReturn the subtitle file for a finished job.Reads private dataNo findings
Why it is in this group
- The name "lunara_get_srt" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "return" and "file": it reads files.
Description, as the server wrote it
Return the subtitle file for a finished job. One line per cue. Use track="secondary" for the translated track (English by default).
Annotations the server declares
- title: Download SRT
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_glossary_extractFind candidate proper nouns in a job’s cues, ranked by frequency, with the first cue they appear in.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it
Find candidate proper nouns in a job’s cues, ranked by frequency, with the first cue they appear in. Suggestions for a glossary, not corrections — nothing is rewritten.
Annotations the server declares
- title: Extract proper nouns
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 1
lunara_list_cuesReturn subtitle cues for a job as timestamps plus text, so you can inspect or reference individual lines before proposing edits.No findings
Why it is in this group
- The name "lunara_list_cues" says "list": a word for reading.
Description, as the server wrote it
Return subtitle cues for a job as timestamps plus text, so you can inspect or reference individual lines before proposing edits.
Annotations the server declares
- title: List cues
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_list_toolsReturn every subtitle tool Lunara exposes, with the minutes each one costs.No findings
Why it is in this group
- The name "lunara_list_tools" says "list": a word for reading.
Description, as the server wrote it
Return every subtitle tool Lunara exposes, with the minutes each one costs. Call this first when you are unsure which tool fits.
Annotations the server declares
- title: List Lunara tools
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- lunara/costMinutes: 0
lunara_probe_mediaReturn duration, dimensions, codecs and container for a URL, plus whether the audio is mono 16 kHz already.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "return": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "return" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Return duration, dimensions, codecs and container for a URL, plus whether the audio is mono 16 kHz already. Call this before choosing an ASR engine.
Annotations the server declares
- title: Probe media
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- lunara/costMinutes: 0

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; lunara_get_srt
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; lunara_probe_media
lunara_start_subtitle_job
lunara_subtitle_from_url
lunara_transcribe
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnlunara_qa_contract
The server marks "lunara_qa_contract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "run": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http lunara https://lunaraai.cc/api/lunara/mcp --header 'Authorization: <your-authorization>'

claude mcp add --transport http lunara https://lunaraai.cc/api/lunara/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__lunara__lunara_list_tools",
      "mcp__lunara__lunara_get_job",
      "mcp__lunara__lunara_get_srt",
      "mcp__lunara__lunara_list_cues",
      "mcp__lunara__lunara_get_glossary",
      "mcp__lunara__lunara_glossary_extract",
      "mcp__lunara__lunara_probe_media",
      "mcp__lunara__lunara_get_coverage"
    ],
    "ask": [
      "mcp__lunara__lunara_start_subtitle_job",
      "mcp__lunara__lunara_subtitle_from_url",
      "mcp__lunara__lunara_upload_video",
      "mcp__lunara__lunara_finish_upload",
      "mcp__lunara__lunara_transcribe",
      "mcp__lunara__lunara_translate",
      "mcp__lunara__lunara_rewrite",
      "mcp__lunara__lunara_segment",
      "mcp__lunara__lunara_qa_contract",
      "mcp__lunara__lunara_readability"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as lunara. Review it before you use it.

Capability tags behind 5 rules

mcp__lunara__lunara_get_srt private-data
mcp__lunara__lunara_start_subtitle_job untrusted-input
mcp__lunara__lunara_subtitle_from_url untrusted-input
mcp__lunara__lunara_transcribe untrusted-input
mcp__lunara__lunara_probe_media untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.DarkMatteros/lunara/verify?hash=1a5fd443d7a0028d6b3ecd947212c804f76d32aaa6f7a74a82ada7d7e26a1eaf" | jq -e '.changed == false'

Pinned hash 1a5fd443d7a0, from Oct 29, 2026, 00:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.DarkMatteros/lunara/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.DarkMatteros/lunara.svg)](https://anlyon.dev/servers/io.github.DarkMatteros/lunara)

Source: MCP Registry · repository. Synced Oct 29, 2026, 00:17 UTC.