C

Railway MCP Server

MCP server for managing Railway projects, services, deployments, environments, and variables via the Railway CLI

Overall Score62/100

Score Breakdown

Server Info

Package
@railway/mcp-server
Registry
npm
Maintainer
RailwayVendor
Category
Cloud & Infrastructure
Tags
paasdeploymenthosting
Last Scanned
7 Apr 2026

Findings

5 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport via StdioServerTransport. Auth is delegated entirely to the Railway CLI - the server reads the token from ~/.railway/config.json (written by `railway login`). No env vars are directly consumed by the MCP server itself. The Railway API token is read from the CLI config file for G... For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

MEDIUM2 of 14 tools have no input schema

Tools use Zod schemas passed as inputSchema objects. Two tools (check-railway-status, list-projects) have empty schemas (no parameters). list-deployments has limit constraint (min: 1, max: 1000). get-logs has enum constraint on logType ('build' | 'deploy'). Most parameters are simple strings without validation constraints. No dangerous execution surfaces - all operations go through the Railway CLI.

Remediation

Define JSON Schema with explicit types for all tool parameters.

MEDIUMOnly 2 of 12 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

Data Exposure

MEDIUM3 list operations lack pagination

list-deployments has a limit parameter (default 20, max 1000) and json flag for structured output. list-projects, list-services, and list-variables return all results without pagination. get-logs supports a lines parameter and filter parameter (requires CLI v4.9.0+). No field selection support.

Remediation

Add limit/offset or cursor-based pagination.

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Tools

14 total
NameDescriptionRisk
check-railway-statusCheck whether the Railway CLI is installed and if the user is logged in.read
list-projectsList all Railway projects for the currently logged in accountread
list-servicesList all services for the currently linked Railway projectread
list-deploymentsList deployments for a Railway service with IDs, statuses and other metadata. Requires Railway CLI v4.10.0+.read
list-variablesShow variables for the active environmentread
get-logsGet build or deployment logs for the currently linked Railway project.read
deployUpload and deploy from the current directory. Supports CI mode, environment, and service options.write
deploy-templateSearch and deploy Railway templates. This tool will search for templates using fuzzy search and automatically deploy the selected template.write
create-project-and-linkCreate a new Railway project and link it to the current directorywrite
create-environmentCreate a new Railway environment for the currently linked project. Optionally duplicate an existing environment and set service variables.write
set-variablesSet environment variables for the active environmentwrite
generate-domainGenerate a domain for the currently linked Railway project.write
link-environmentLink to a specific Railway environment.write
link-serviceLink a service to the current Railway project.write

Deploy Railway MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow