Railway MCP Server

Railway infrastructure management for AI clients via natural language commands.

Data last scanned yesterday · Reviewed last month

12 dangerous tools24 tools73TypeScriptMIT

Overview

Railway MCP Server allows AI assistants to interact directly with the Railway.app platform. It provides tools to list and manage projects, deployments, and services, as well as handle environment variables and network configurations. Users can programmatically deploy services from GitHub repositories or Docker images through their preferred MCP client. The server supports essential infrastructure tasks such as restarting deployments and managing service volumes, aiming to streamline cloud resource maintenance.

Our verdict

With a security score of 31/100, this server is currently classified as high risk. A major factor is that the project has not been updated in over 401 days, meaning it lacks recent security patches or maintenance. Given that the authentication methods and overall security posture remain unreviewed, this tool should only be used in isolated, non-critical testing environments rather than production workflows.

  • Supports core project and service management tasks
  • Small dependency footprint with only 3 direct libraries
  • Open source project under the MIT license
  • High security risk due to lack of recent maintenance
  • Stagnant development with no commits for over 401 days
  • Authentication and read-only modes remain unreviewed

Setup

Claude Desktop
{
  "mcpServers": {
    "railway-mcp": {
      "args": [
        "-y",
        "@jasontanswe/railway-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
configureSet your Railway API token (only needed if not provided in environment variables)low
project-listList all projects in your accountlow
project-infoGet detailed information about a specific projectlow
project-createCreate a new project with optional team IDmedium
project-deleteDelete a projecthigh
project-environmentsList all environments in a projectlow
service-listList all services in a specific projectlow
service-infoGet detailed information about a specific servicelow
service-create-from-repoCreate a new service from a GitHub repositorymedium
service-create-from-imageCreate a new service from a Docker imagemedium

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

What are the system requirements for running the Railway MCP server?

You must have Node.js version 18 or higher installed to ensure support for the built-in fetch API.

What do I need to start using this server?

You need an active Railway.app account and a Railway API token generated from your account settings page.

Is the server fully feature-complete?

No, this server is currently under development. While project, service, and variable management are functional, other features like full database template support are still being built.

How can I provide my Railway API token in Claude Desktop?

You can either add it to your configuration file under the RAILWAY_API_TOKEN environment variable, or configure it directly within the chat interface.

Which MCP clients are currently recommended?

Claude for Desktop is currently considered battle-tested, while other clients like Cursor, Cline, and Windsurf are still being tested or undergoing development.

Changelog

Badge

Railway MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.