generated: '2026-07-20'
method: derived
source: https://lunarcrush.com/developers/api/authentication
note: >-
  Derived from the documented authentication model, content negotiation, and
  endpoint conventions. No published third-party compliance certifications (SOC 2,
  ISO 27001, PCI, HIPAA) were found, so no Compliance pointer is emitted.
standards:
- id: oauth2
  conforms: false
  evidence: Authentication is a static Bearer API key, not an OAuth 2.0 flow.
- id: oidc
  conforms: false
- id: http-bearer-auth
  conforms: true
  evidence: 'Authorization: Bearer <API_KEY> per RFC 6750-style bearer usage.'
- id: rfc9457-problem-details
  conforms: false
  evidence: No application/problem+json error catalog published.
- id: rest-json
  conforms: true
  evidence: JSON responses with a top-level data envelope across v4 endpoints.
- id: content-negotiation
  conforms: partial
  evidence: Format selected via ?format=json|csv|markdown query param rather than Accept header.
- id: mcp
  conforms: true
  evidence: Hosted Model Context Protocol server at lunarcrush.ai/mcp (protocolVersion 2024-11-05).
- id: pagination
  conforms: true
  evidence: sort/limit parameters on list endpoints.