Back
Overview

Privacy-first AI agent
you actually own.

LunarWing is agentic software built in Rust, designed from the ground up for privacy, security, and self-hosting. No telemetry, no phone-home, no compromise on secret preservation. Your data stays yours.

What makes it different

// Real Secret Preservation

Secrets are encrypted at rest, injected at the host boundary, and never exposed to sandboxed code. WASM tools and external services cannot read credentials — ever.

// WASM Sandbox

All tools and channels run in a capability-scoped WebAssembly sandbox. Rate-limited, output-scanned for leaks, and isolated from the host runtime.

// Multi-Tenant

Run isolated tenant instances on a single host. Each tenant gets its own database, ports, service, LLM config, and channel credentials.

// Open Protocol Channels

XMPP with OMEMO encryption, Gotify push notifications, WeeChat relay, IRC, and a web gateway. No proprietary lock-in.

// MT Admin CLI

A powerful multi-tenant administration CLI for provisioning, building, starting, and managing tenant instances. Automated onboarding wrapper included.

// Rust + AGPL-3.0

Built in Rust 2024 for memory safety and performance. Licensed AGPL-3.0 — free and open source, copyleft protected.

How it works

01
Channels External input (XMPP, IRC, web, etc.) is normalized into a unified message stream by the ChannelManager.
02
Agent The agent core handles session state, submission parsing, the LLM tool loop, approvals, and background runtime behavior.
03
Tools & Extensions Built-in Rust tools for core capabilities. WASM sandbox for plugins. MCP for external server integrations. All capability-scoped.
04
Secrets Boundary Credentials live in an encrypted store. The host injects them into HTTP requests at the boundary — sandboxed code never sees them.
Get Started

Ready to launch?

Self-host LunarWing in minutes with the MT Admin CLI, or browse the source on GitLab.

View on GitLab Read the Blog