Draft: research not yet reviewed. Hidden from search engines and production.
Railway MCP server & Claude connector
Does Railway have an official MCP server or Claude connector?
Official
As of October 2026, Railway publishes an official remote MCP server at mcp.railway.com, documented on docs.railway.com and listed in Claude's directory as Anthropic verified. It signs in with OAuth, and a local server runs through the Railway CLI. It can redeploy services and create projects, and no read-only mode is documented.
Last checked
Verdict and evidence
- What we checked
- Railway remote MCP server (mcp.railway.com)
- Published by
- Railway (official)
- Runs
- Hosted (remote)
- Sign-in
- OAuth sign-in
- Stage
- unknown
- Plan
- Needs a Railway account; no plan tier is stated.
- Endpoint
https://mcp.railway.com
Evidence
- Railway MCP Server docs (docs.railway.com, seen October 18, 2026)
- Railway remote MCP server docs (docs.railway.com, seen October 18, 2026)
- Railway connector (Claude directory) (claude.com, seen October 18, 2026)
- railwayapp/railway-mcp-server (archived) (github.com, seen October 18, 2026)
What an AI can do in Railway
Read
- Show account identity
whoami - List projects
list-projects - List services
list-services
Create
- Create a project
create-project
Update
- Set a feature flag (admin)
set-feature-flag
Delete
- Delete a feature flag (admin)
delete-feature-flag
Run
- Redeploy a service
redeploy - Ask Railway's AI agent to debug or configure a service
railway-agent
From the publisher’s documentation for the version we checked. Not every tool is listed.
Setup
Claude Code
Connect through the Railway CLI (CLI 5.44.0 or later); use --oauth to connect with OAuth instead.
railway setup agent # connect through the CLI (default)
railway setup agent --oauth # connect with OAuthSourceOther clients
Cursor and VS Code: `railway mcp install` merges a Railway entry into existing editor configs. Per-editor snippets are rendered by the docs site and were not captured.
railway mcp installSourceSafety check
- Pass
Publisher verified
Documented on docs.railway.com, endpoint on mcp.railway.com, and the Claude directory lists it as made by Railway and Anthropic verified.
- Pass
Auth model
OAuth with short-lived tokens; you pick which workspaces and projects the client can reach, and tokens are revocable in account settings. Project tokens are not accepted.
- Flag
Write and delete access
Tools can create projects, redeploy, accept staged deploys and delete feature flags. Destructive tools carry protocol-level hints so clients can prompt, but no read-only mode is documented. Docs advise using non-critical environments.
- Pass
Tool-description injection scan
Read both docs pages and the Claude directory tool list (names only); no text addressed to an AI was found. Hosted tool descriptions were not retrieved.
- Unknown
Repo maintenance
No public source for the hosted server was found. The older standalone repo railwayapp/railway-mcp-server is archived (last push 2026-05-23, 190 stars) and its docs now point to the CLI route.
Community alternatives
Built and maintained by third parties, not Railway. Check the safety notes before connecting one to a real account.
Railway local MCP server (railway mcp local)
Railway · Runs locally · Managed by the vendorList projects · Get logs · List variables · Set variables · Deploy · Remove a service
- ⚠ Write and delete access: Exposes remove_service, delete_domain, remove_tcp_proxy, remove_bucket, remove_volume. Docs say destructive tools return a preview and need confirm: true.
- Railway MCP Server docs (docs.railway.com, seen October 18, 2026)
- Railway remote MCP server docs (docs.railway.com, seen October 18, 2026)
FAQ
Does Railway have an official MCP server?
Yes. Railway documents a hosted server at mcp.railway.com and a local one started with `railway mcp local`.
Is Railway a Claude connector?
Yes. The Claude directory lists Railway as made by Railway and Anthropic verified, with 16 tools.
How does it authenticate?
Through your Railway login via the CLI, or OAuth in the browser. Project tokens are not accepted.
Can it delete things?
The remote server can redeploy and delete feature flags; the local server can remove services, volumes and domains. Destructive tools ask for confirmation in clients that honor the hints.
What about the older railway-mcp-server repo?
The standalone railwayapp/railway-mcp-server repo is archived. Railway's current docs point to the hosted server and the CLI.
Last reviewed .
Get your badge
Work at Railway? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.
Markdown (README)
[](https://mcpornot.com/railway)HTML
<a href="https://mcpornot.com/railway"><img src="https://mcpornot.com/badge/railway.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>Compare Railway
Something changed?
Vendors ship MCP updates often. If Railway launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.
New official MCP servers, weekly
One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.