Skip to content

Connectors · Developer & infrastructure

Railway MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Railway and the rest of your systems. It gives your agent 391 Railway actions (162 reads, 164 writes and 65 that wait for a confirmation) and holds the Railway credential itself, so the agent never does. It paces Railway's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "railway.regions.list",  intent: "check which Railway account is connected"}# List regions · read · 1 upstream call
  • 391actionsin one signed file
  • 162readlook, never change
  • 164writecreate and update
  • 65wait for a yesdestructive, confirmed first

Set up

Connect Railway in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Railway.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_tokenRailway account or workspace token: railway.com/account/tokens (choose 'No workspace' for an account token, or a…
    account { op: "connections.requirements", service: "railway" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "railway.regions.list" }# list regions · read · 1 upstream callcheck { action: "railway.volumes.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Railway at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_token
Limits we pace to
10 calls a second and 10,000 an hour, per connection
API covered
Railway (cloud application platform) API graphql-v2backboard.railway.com
Built from
Railway's documentation, read 23 October 2026docs.railway.combackboard.railway.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
149 of 162 reads, for up to an hour; a write clears what it affects
Shared entities
2, so ask can line Railway up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Railway.

391 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 162readlook, never change
  • 164writecreate and update
  • 65destructivewait for a confirmation
  1. Railway

    391

    162 read · 164 write · 65 destructive

    List deployments · Get deployment · List regions · List ssh public keys

Top actions

The Railway API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 26 of Railway's 26 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
railway.deployments.listList deploymentsGet all deploymentsreaddevops.deployment.list22 connectors
railway.deployments.getGet deploymentFind a single deploymentreaddevops.deployment.get22 connectors
railway.regions.listList regionsList available regionsreadinfra.region.list16 connectors
railway.volumes.createVolume createCreate a persistent volume in a projectwriteinfra.volume.create8 connectors
railway.ssh_public_keys.listList ssh public keysGets SSH public keysreadinfra.ssh_key.list8 connectors
railway.users.meGet meGets the authenticated user.readidentity.current_user.get307 connectors
railway.api_tokens.createApi token createCreates a new API token.writeidentity.api_key.create100 connectors
railway.api_tokens.listList api tokensGets all API tokens for the authenticated user.readidentity.api_key.list96 connectors
railway.environments.listList environmentsGets all environments for a project.readdevops.environment.list24 connectors
railway.ssh_public_keys.createSsh public key createCreates a new SSH public keywriteinfra.ssh_key.create6 connectors
railway.environments.createEnvironment createCreates a new environment.writedevops.environment.create18 connectors
railway.deployments.cancelDeployment cancelCancels a deployment.destructivedevops.deployment.cancel7 connectors

Try it

Prompts to paste into Claude.

Each one names the Railway actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Railway? List every user and their role.

    callsrailway.project_members.list

  2. Writewrite

    Volume create in Railway. Show me exactly what you will send before you save it.

    callsrailway.volumes.create

Governance for Railway

Destructive actions wait for a yes.

65 Railway actions are destructive. The first 10:

  • Deployment cancelrailway.deployments.cancel
  • Volume deleterailway.volumes.delete
  • Ssh public key deleterailway.ssh_public_keys.delete
  • Api token deleterailway.api_tokens.delete
  • Environment deleterailway.environments.delete
  • Notification rule deleterailway.notification_rules.delete
  • Project transferrailway.projects.transfer
  • Project transfer confirmrailway.projects.transfer_confirm
  • Project transfer initiaterailway.projects.transfer_initiate
  • Environment iac partial transferrailway.environments.iac_partial_transfer

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dorailway.deployments.cancelconfirm_policy: human

Deployment cancel?

intent: the user asked me to deployment cancel

run suspended · waiting for a named person · key railway-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "railway-agent",  allowed_actions: ["railway.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "railway.deployments.cancel", approver: "[email protected]" },    { match: "railway.volumes.delete", approver: "[email protected]" },    { match: "railway.ssh_public_keys.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Railway only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Railway costs on actionlake.

Every Railway action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Railway refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 391 Railway actions
  • 28actions pageeach page of a long list is one call
  • 149reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Railway action.

391 actions by area: the id your agent calls, what it does, and its effect.

Railway391
  • railway.access_group_members.addAccess group member addwrite
  • railway.access_group_members.removeAccess group member removedestructive
  • railway.access_group_projects.attachAccess group project attachwrite
  • railway.access_group_projects.detachAccess group project detachdestructive
  • railway.access_groups.createAccess group createwrite
  • railway.access_groups.deleteAccess group deletedestructive
  • railway.access_groups.updateAccess group updatewrite
  • railway.all_platform_feature_flags.listList all platform feature flagsread
  • railway.api_tokens.createApi token createwrite
  • railway.api_tokens.currentGet api tokenread
  • railway.api_tokens.deleteApi token deletedestructive
  • railway.api_tokens.listList api tokensread
  • railway.audit_log_event_types.listList audit log event type inforead
  • railway.audit_logs.getGet audit logread
  • railway.audit_logs.listList audit logsread
  • railway.bot_scope_bindings.listList bot scope bindingsread
  • railway.bot_scope_bindings.removeBot scope binding removedestructive
  • railway.bucket_credentials.resetBucket credentials resetwrite
  • railway.bucket_instance_details.getGet bucket instance detailsread
  • railway.bucket_s3_credentials.listList bucket s3 credentialsread
  • railway.buckets.createBucket createwrite
  • railway.buckets.updateBucket updatewrite
  • railway.build_logs.listList build logsread
  • railway.canvas_views.mergeCanvas view mergewrite
  • railway.canvas_views.merge_previewGet canvas view merge previewread
  • railway.changelog_block_image.getGet changelog block imageread
  • railway.clearance_tokens.createClearance token createwrite
  • railway.clearance_tokens.revokeClearance token revokedestructive
  • railway.cloud_agent_checkpoints.createCloud agent checkpoint createwrite
  • railway.cloud_agent_checkpoints.deleteCloud agent checkpoint deletedestructive
  • railway.cloud_agent_checkpoints.getGet cloud agent checkpointread
  • railway.cloud_agent_checkpoints.listList cloud agent checkpointsread
  • railway.cloud_agent_console_sessions.listList cloud agent console sessionsread
  • railway.cloud_agent_feedback.createCloud agent feedback createwrite
  • railway.cloud_agent_sessions.renameCloud agent session renamewrite
  • railway.cloud_agent_task_models.listGet cloud agent task modelsread
  • railway.cloud_agent_tasks.cancelCloud agent task canceldestructive
  • railway.cloud_agent_tasks.dispatchCloud agent task dispatchwrite
  • railway.cloud_agent_tasks.getGet cloud agent taskread
  • railway.cloud_agent_tasks.listList cloud agent tasksread
  • railway.cloud_agent_tasks.recoverCloud agent task recoverwrite
  • railway.cloud_agent_tasks.respondCloud agent task respondwrite
  • railway.cloud_agents.archiveCloud agent archivewrite
  • railway.cloud_agents.createCloud agent createwrite
  • railway.cloud_agents.deleteCloud agent deletedestructive
  • railway.cloud_agents.deployCloud agent deploywrite
  • railway.cloud_agents.forkCloud agent forkwrite
  • railway.cloud_agents.getGet cloud agentread
  • railway.cloud_agents.listList cloud agentsread
  • railway.cloud_agents.mark_seenCloud agent mark seenwrite
  • railway.cloud_agents.sleepCloud agent sleepwrite
  • railway.cloud_agents.unarchiveCloud agent unarchivewrite
  • railway.cloud_agents.wakeCloud agent wakewrite
  • railway.compliance_agreements.getGet compliance agreementsread
  • railway.custom_domains.check_availableGet custom domain availableread
  • railway.custom_domains.createCustom domain createwrite
  • railway.custom_domains.deleteCustom domain deletedestructive
  • railway.custom_domains.getGet custom domainread
  • railway.custom_domains.issue_certificateCustom domain issue certificatewrite
  • railway.custom_domains.updateCustom domain updatewrite
  • railway.customers.create_free_plan_subscriptionCustomer create free plan subscriptionwrite
  • railway.customers.toggle_payouts_to_creditsCustomer toggle payouts to creditsdestructive
  • railway.deployment_events.listList deployment eventsread
  • railway.deployment_instance_executions.createDeployment instance execution createwrite
  • railway.deployment_instance_executions.listList deployment instance executionsread
  • railway.deployment_logs.listList deployment logsread
  • railway.deployment_snapshots.getGet deployment snapshotread
  • railway.deployment_triggers.createDeployment trigger createwrite
  • railway.deployment_triggers.deleteDeployment trigger deletedestructive
  • railway.deployment_triggers.listList deployment triggersread
  • railway.deployment_triggers.updateDeployment trigger updatewrite
  • railway.deployments.approveDeployment approvewrite
  • railway.deployments.cancelDeployment canceldestructive
  • railway.deployments.getGet deploymentread
  • railway.deployments.listList deploymentsread
  • railway.deployments.redeployDeployment redeploywrite
  • railway.deployments.removeDeployment removedestructive
  • railway.deployments.restartDeployment restartwrite
  • railway.deployments.rollbackDeployment rollbackwrite
  • railway.deployments.stopDeployment stopdestructive
  • railway.dns_query_logs.listList dns query logsread
  • railway.domains.list_for_serviceGet domainsread
  • railway.egress_gateway_legacy_preview.listList egress gateway legacy previewread
  • railway.egress_gateways.clearEgress gateway associations cleardestructive
  • railway.egress_gateways.createEgress gateway association createwrite
  • railway.egress_gateways.ha_migration_previewEgress gateway ha migration previewread
  • railway.egress_gateways.ha_previewList egress gateway ha previewread
  • railway.egress_gateways.listList egress gatewaysread
  • railway.egress_gateways.rollback_from_haEgress gateway rollback from hawrite
  • railway.egress_gateways.upgrade_to_haEgress gateway upgrade to hawrite
  • railway.environment_change_sets.applyEnvironment apply change setwrite
  • railway.environment_change_sets.apply_statusGet environment change set applyread
  • railway.environment_change_sets.previewEnvironment preview change setread
  • railway.environment_config_plan_comments.upsertEnvironment config plan comment upsertwrite
  • railway.environment_history.listList environment historyread
  • railway.environment_logs.listList environment logsread
  • railway.environment_patches.commitEnvironment patch commitwrite
  • railway.environment_patches.commit_stagedEnvironment patch commit stagedwrite
  • railway.environment_patches.getGet environment patchread
  • railway.environment_patches.listList environment patchesread
  • railway.environment_patches.restageEnvironment patch restagewrite
  • railway.environment_patches.stage_changesEnvironment stage changeswrite
  • railway.environment_patches.stagedGet environment staged changesread
  • railway.environments.createEnvironment createwrite
  • railway.environments.deleteEnvironment deletedestructive
  • railway.environments.getGet environmentread
  • railway.environments.has_legacy_static_egressGet environment has legacy static egressread
  • railway.environments.iac_partial_releaseEnvironment iac partial releasewrite
  • railway.environments.iac_partial_transferEnvironment iac partial transferdestructive
  • railway.environments.import_docker_composeDocker compose importwrite
  • railway.environments.listList environmentsread
  • railway.environments.override_baseBase environment overridewrite
  • railway.environments.pending_workList environment pending workread
  • railway.environments.renameEnvironment renamewrite
  • railway.environments.trigger_deployEnvironment triggers deploywrite
  • railway.environments.unskip_serviceEnvironment unskip servicewrite
  • railway.environments.update_clearance_defaultEnvironment clearance default updatewrite
  • railway.events.listList eventsread
  • railway.external_workspaces.listList external workspacesread
  • railway.feature_flags.addFeature flag addwrite
  • railway.feature_flags.removeFeature flag removedestructive
  • railway.function_runtimes.getGet function runtimeread
  • railway.function_runtimes.listList function runtimesread
  • railway.github_pull_requests.infoGet github pr inforead
  • railway.github_pull_requests.info_resultGet github pr info resultread
  • railway.github_repo_branches.listList github repo branchesread
  • railway.github_repos.check_accessGet git hub repo access availableread
  • railway.github_repos.check_name_availableGet github is repo name availableread
  • railway.github_repos.deployGithub repo deploywrite
  • railway.github_repos.getGet github reporead
  • railway.github_repos.listList github reposread
  • railway.github_repos.updateGithub repo updatewrite
  • railway.github_ssh_keys.listList git hub ssh keysread
  • railway.github_writable_scopes.listList github writable scopesread
  • railway.heroku.import_variablesHeroku import variableswrite
  • railway.heroku_apps.listList heroku appsread
  • railway.http_duration_metrics.getGet http duration metricsread
  • railway.http_logs.listList http logsread
  • railway.http_metrics.getGet http metricsread
  • railway.http_metrics.grouped_by_statusList http metrics grouped by statusread
  • railway.integration_auths.getGet integration authread
  • railway.integration_auths.listList integration authsread
  • railway.integrations.createIntegration createwrite
  • railway.integrations.deleteIntegration deletedestructive
  • railway.integrations.listList integrationsread
  • railway.integrations.updateIntegration updatewrite
  • railway.invite_codes.getGet invite coderead
  • railway.invite_codes.useInvite code usewrite
  • railway.metrics.listList metricsread
  • railway.my_cloud_agents.listList my cloud agentsread
  • railway.mysql_pitr.restorable_windowGet mysql pitr restorable windowread
  • railway.network_flow_logs.listList network flow logsread
  • railway.notification_deliveries.getGet notification deliveryread
  • railway.notification_deliveries.listList notification deliveriesread
  • railway.notification_deliveries.mark_as_readNotification deliveries mark as readwrite
  • railway.notification_rules.createNotification rule createwrite
  • railway.notification_rules.deleteNotification rule deletedestructive
  • railway.notification_rules.listList notification rulesread
  • railway.notification_rules.updateNotification rule updatewrite
  • railway.observability_dashboards.createObservability dashboard createwrite
  • railway.observability_dashboards.listList observability dashboardsread
  • railway.observability_dashboards.resetObservability dashboard resetwrite
  • railway.observability_dashboards.updateObservability dashboard updatewrite
  • railway.passkeys.listList passkeysread
  • railway.pitr_ha_clusters.cancel_workflowCancel pitr ha workflowdestructive
  • railway.pitr_ha_clusters.clear_workflow_progressClear pitr ha workflow progressdestructive
  • railway.pitr_ha_clusters.disable_pitrDisable pitr for ha clusterwrite
  • railway.pitr_ha_clusters.enable_pitrEnable pitr for ha clusterwrite
  • railway.pitr_ha_clusters.replication_healthGet pitr ha cluster replication healthread
  • railway.pitr_ha_clusters.workflow_progressGet pitr ha workflow progressread
  • railway.platform_status.getGet platform statusread
  • railway.preferences.getGet preferencesread
  • railway.preferences.updatePreferences updatewrite
  • railway.private_network_endpoints.check_name_availableGet private network endpoint name availableread
  • railway.private_network_endpoints.getGet private network endpointread
  • railway.private_network_endpoints.renamePrivate network endpoint renamewrite
  • railway.private_networks.listList private networksread
  • railway.project_feature_flags.addProject feature flag addwrite
  • railway.project_feature_flags.removeProject feature flag removedestructive
  • railway.project_invitations.acceptProject invitation acceptwrite
  • railway.project_invitations.createProject invitation createwrite
  • railway.project_invitations.deleteProject invitation deletedestructive
  • railway.project_invitations.getGet project invitationread
  • railway.project_invitations.listList project invitationsread
  • railway.project_invitations.resendProject invitation resendwrite
  • railway.project_invite_codes.getGet project invite coderead
  • railway.project_members.addProject member addwrite
  • railway.project_members.listList project membersread
  • railway.project_members.removeProject member removedestructive
  • railway.project_members.updateProject member updatewrite
  • railway.project_members.workspace_membersGet project workspace membersread
  • railway.project_tokens.createProject token createwrite
  • railway.project_tokens.currentGet project tokenread
  • railway.project_tokens.deleteProject token deletedestructive
  • railway.project_tokens.listList project tokensread
  • railway.projects.cancel_scheduled_deleteProject schedule delete cancelwrite
  • railway.projects.claimProject claimwrite
  • railway.projects.complianceGet project complianceread
  • railway.projects.createProject createwrite
  • railway.projects.deleteProject deletedestructive
  • railway.projects.favoritesList project favoritesread
  • railway.projects.force_deleteProject schedule delete forcedestructive
  • railway.projects.getGet projectread
  • railway.projects.get_manyList projects by idsread
  • railway.projects.invite_userProject invite userwrite
  • railway.projects.leaveProject leavedestructive
  • railway.projects.listList projectsread
  • railway.projects.resource_accessGet project resource accessread
  • railway.projects.schedule_deleteProject schedule deletedestructive
  • railway.projects.set_favoriteProject favorite setwrite
  • railway.projects.transferProject transferdestructive
  • railway.projects.transfer_confirmProject transfer confirmdestructive
  • railway.projects.transfer_initiateProject transfer initiatedestructive
  • railway.projects.updateProject updatewrite
  • railway.projects.update_clearance_defaultProject clearance default updatewrite
  • railway.provider_auths.removeProvider auth removedestructive
  • railway.public_stats.getGet public statsread
  • railway.railway_domain_dns_records.createRailway domain dns record createwrite
  • railway.railway_domain_dns_records.deleteRailway domain dns record deletedestructive
  • railway.railway_domain_dns_records.listList railway domain dns recordsread
  • railway.railway_domain_dns_records.updateRailway domain dns record updatewrite
  • railway.railway_domain_email_forwarding.eligibilityGet railway domain email forwarding eligibilityread
  • railway.railway_domain_email_forwarding.limitsGet railway domain email forwarding limitsread
  • railway.railway_domain_email_forwarding_rules.createRailway domain email forwarding rule createdestructive
  • railway.railway_domain_email_forwarding_rules.deleteRailway domain email forwarding rule deletedestructive
  • railway.railway_domain_email_forwarding_rules.listList railway domain email forwarding rulesread
  • railway.railway_domain_email_forwarding_rules.remove_allRailway domain email forwarding remove alldestructive
  • railway.railway_domain_email_forwarding_rules.send_testRailway domain email forwarding rule send testdestructive
  • railway.railway_domain_email_forwarding_rules.updateRailway domain email forwarding rule updatedestructive
  • railway.railway_domains.getGet railway domainread
  • railway.railway_domains.get_by_nameGet railway domain by nameread
  • railway.railway_domains.listList railway domainsread
  • railway.railway_domains.set_nameserversRailway domain nameservers setwrite
  • railway.railway_domains.updateRailway domain updatewrite
  • railway.referral_info.getGet referral inforead
  • railway.referral_info.updateReferral info updatewrite
  • railway.regions.listList regionsread
  • railway.resource_access.getGet resource accessread
  • railway.sandbox_checkpoints.createSandbox checkpoint createwrite
  • railway.sandbox_checkpoints.deleteSandbox checkpoint deletedestructive
  • railway.sandbox_checkpoints.listList sandbox checkpointsread
  • railway.sandbox_checkpoints.renameSandbox checkpoint renamewrite
  • railway.sandbox_sessions.listList sandbox sessionsread
  • railway.sandbox_template_builds.createSandbox template buildwrite
  • railway.sandbox_template_builds.getGet sandbox template buildread
  • railway.sandboxes.createSandbox createwrite
  • railway.sandboxes.destroySandbox destroydestructive
  • railway.sandboxes.execSandbox execwrite
  • railway.sandboxes.getGet sandboxread
  • railway.sandboxes.heartbeatSandbox heartbeatwrite
  • railway.sandboxes.listList sandboxesread
  • railway.service_cdn.disableDisable service cdnwrite
  • railway.service_cdn.enableEnable service cdnwrite
  • railway.service_cdn.purge_cachePurge service cachedestructive
  • railway.service_domains.check_availableGet service domain availableread
  • railway.service_domains.createService domain createwrite
  • railway.service_domains.deleteService domain deletedestructive
  • railway.service_domains.updateService domain updatewrite
  • railway.service_edge_configs.set_under_attack_modeSet service under attack modewrite
  • railway.service_edge_configs.updateUpdate service edge configwrite
  • railway.service_edge_rules.updateUpdate service edge ruleswrite
  • railway.service_edge_rules.validateGet validate service edge rulesread
  • railway.service_feature_flags.addService feature flag addwrite
  • railway.service_feature_flags.removeService feature flag removedestructive
  • railway.service_instance_limits.getGet service instance limitsread
  • railway.service_instance_limits.overrideGet service instance limit overrideread
  • railway.service_instance_limits.updateService instance limits updatewrite
  • railway.service_instances.auto_deploy_statusGet service instance auto deploy statusread
  • railway.service_instances.clear_auto_update_snoozeService instance auto update snooze clearwrite
  • railway.service_instances.deployService instance deploywrite
  • railway.service_instances.deploy_v2Service instance deploy v2write
  • railway.service_instances.dismiss_vuln_remediationService instance vuln remediation dismisswrite
  • railway.service_instances.getGet service instanceread
  • railway.service_instances.is_updatableGet service instance is updatableread
  • railway.service_instances.patch_vuln_nowService instance vuln remediation patch nowwrite
  • railway.service_instances.redeployService instance redeploywrite
  • railway.service_instances.snooze_auto_updateService instance auto update snoozewrite
  • railway.service_instances.updateService instance updatewrite
  • railway.service_instances.update_auto_deployService instance auto deploy updatewrite
  • railway.service_instances.update_auto_update_scheduleService instance auto update schedule updatewrite
  • railway.service_instances.update_clearanceService instance clearance updatewrite
  • railway.services.connectService connectwrite
  • railway.services.createService createwrite
  • railway.services.deleteService deletedestructive
  • railway.services.disconnectService disconnectdestructive
  • railway.services.getGet serviceread
  • railway.services.remove_upstream_urlService remove upstream urlwrite
  • railway.services.updateService updatewrite
  • railway.sessions.deleteSession deletedestructive
  • railway.sessions.listList sessionsread
  • railway.shell_tokens.generateGenerate shell tokenwrite
  • railway.signal_changes.listList signal changesread
  • railway.signals.createSignal createwrite
  • railway.signals.deleteSignal deletedestructive
  • railway.signals.evaluateGet signal evaluateread
  • railway.signals.getGet signalread
  • railway.signals.listList signalsread
  • railway.signals.replaceSignal replacewrite
  • railway.signals.rollbackSignal rollbackwrite
  • railway.signals.set_defaultSignal default setwrite
  • railway.signals.set_ruleSignal rule setwrite
  • railway.signals.unset_ruleSignal rule unsetdestructive
  • railway.slack_channels.upsertUpsert slack channelwrite
  • railway.ssh_public_keys.createSsh public key createwrite
  • railway.ssh_public_keys.deleteSsh public key deletedestructive
  • railway.ssh_public_keys.listList ssh public keysread
  • railway.tcp_proxies.deleteTcp proxy deletedestructive
  • railway.tcp_proxies.listList tcp proxiesread
  • railway.template_metrics.getGet template metricsread
  • railway.templates.cloneTemplate clonewrite
  • railway.templates.countGet templates countread
  • railway.templates.deleteTemplate deletedestructive
  • railway.templates.deploy_v2Template deploy v2write
  • railway.templates.eject_service_sourceTemplate service source ejectwrite
  • railway.templates.generateTemplate generatewrite
  • railway.templates.getGet templateread
  • railway.templates.listList templatesread
  • railway.templates.publishTemplate publishwrite
  • railway.templates.revertTemplate revertwrite
  • railway.templates.searchSearch templateread
  • railway.templates.source_for_projectGet template source for projectread
  • railway.templates.unpublishTemplate unpublishdestructive
  • railway.templates.update_volumeTemplate volume updatewrite
  • railway.traces.get_spansList traceread
  • railway.traces.listList tracesread
  • railway.tracing_status.listList tracing statusread
  • railway.trusted_domains.createTrusted domain createwrite
  • railway.trusted_domains.deleteTrusted domain deletedestructive
  • railway.trusted_domains.listList trusted domainsread
  • railway.trusted_domains.retrigger_verificationTrusted domain retrigger verificationwrite
  • railway.trusted_domains.updateTrusted domain updatewrite
  • railway.two_factor_info.getGet two factor inforead
  • railway.usage.agentGet agent usageread
  • railway.usage.estimatedList estimated usageread
  • railway.usage.getList usageread
  • railway.usage.project_serviceList project service usageread
  • railway.usage.workspace_totalsList workspace usage totalsread
  • railway.usage_limits.removeUsage limit removedestructive
  • railway.usage_limits.setUsage limit setwrite
  • railway.usage_limits.set_agentAgent usage limit setwrite
  • railway.user_profiles.getGet user profileread
  • railway.users.accept_termsUser terms updatewrite
  • railway.users.agree_fair_useFair use agreewrite
  • railway.users.disconnect_discordUser discord disconnectdestructive
  • railway.users.meGet meread
  • railway.users.update_profileUser profile updatewrite
  • railway.variables.configure_sharedShared variable configurewrite
  • railway.variables.deleteVariable deletedestructive
  • railway.variables.for_service_deploymentGet variables for service deploymentread
  • railway.variables.listGet variablesread
  • railway.variables.upsertVariable upsertwrite
  • railway.variables.upsert_collectionVariable collection upsertwrite
  • railway.vercel_info.getGet vercel inforead
  • railway.volume_instance_backup_schedules.listList volume instance backup schedule listread
  • railway.volume_instance_backup_schedules.updateVolume instance backup schedule updatewrite
  • railway.volume_instance_backups.createVolume instance backup createwrite
  • railway.volume_instance_backups.deleteVolume instance backup deletedestructive
  • railway.volume_instance_backups.listList volume instance backup listread
  • railway.volume_instance_backups.lockVolume instance backup lockwrite
  • railway.volume_instance_backups.restoreVolume instance backup restorewrite
  • railway.volume_instances.getGet volume instanceread
  • railway.volume_instances.pitr_restoreVolume instance pitr restorewrite
  • railway.volume_instances.pitr_restore_estimateGet volume instance pitr restore estimateread
  • railway.volume_instances.updateVolume instance updatewrite
  • railway.volumes.createVolume createwrite
  • railway.volumes.deleteVolume deletedestructive
  • railway.volumes.updateVolume updatewrite
  • railway.webhooks.testWebhook testwrite
  • railway.workflow_status.getGet workflow statusread
  • railway.workspace_identity_providers.listList workspace identity providersread
  • railway.workspace_invite_codes.createWorkspace invite code createwrite
  • railway.workspace_invite_codes.useWorkspace invite code usewrite
  • railway.workspace_members.change_permissionWorkspace permission changewrite
  • railway.workspace_members.inviteWorkspace user invitewrite
  • railway.workspace_members.removeWorkspace user removedestructive
  • railway.workspace_policies.add_deploy_sourceWorkspace policy deploy source allowlist addwrite
  • railway.workspace_policies.getGet workspace policyread
  • railway.workspace_policies.remove_deploy_sourceWorkspace policy deploy source allowlist removedestructive
  • railway.workspace_policies.selectable_deploy_sourcesList workspace policy selectable deploy sourcesread
  • railway.workspace_policies.update_itemWorkspace policy item updatewrite
  • railway.workspace_templates.listList workspace templatesread
  • railway.workspaces.deleteWorkspace deletedestructive
  • railway.workspaces.getGet workspaceread
  • railway.workspaces.get_by_codeGet workspace by coderead
  • railway.workspaces.leaveWorkspace leavedestructive
  • railway.workspaces.set_restrict_project_visibilityWorkspace set restrict project visibility to groupswrite
  • railway.workspaces.updateWorkspace updatewrite
  • railway.workspaces.update_two_factor_enforcementWorkspace two factor enforcement updatewrite
  • railway.workspaces.upsert_slack_channelWorkspace upsert slack channelwrite
  • railway.x_agent.claim_infoGet x agent claim inforead
  • railway.x_agent.claim_projectX agent project claimwrite

Questions

The Railway MCP server, answered.

Is there a Railway MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 391 Railway actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Railway.

What do I need to connect Railway?

Railway account or workspace token: railway.com/account/tokens (choose 'No workspace' for an account token, or a…. The free call account { op: "connections.requirements", service: "railway" } lists exactly what to paste.

Can an AI agent delete or change things in Railway?

Only if its key allows it, and only with an explicit confirmation. 65 Railway actions are destructive, including deployment cancel, volume delete and ssh public key delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Railway API limit?

actionlake paces every call to the limits in the Railway service file: 10 calls a second and 10,000 an hour per connection. Repeated reads are answered from cache (149 Railway actions can be), which never reaches Railway.

What does a Railway action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (28 Railway actions page). Cache hits, searches, dry runs and calls Railway refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Railway API does it cover?

The Railway (cloud application platform) API graphql-v2 at backboard.railway.com. It is built from Railway's documentation as read on 23 October 2026. 391 actions in 1 area, each one in the signed service file (version 1.0.0).

Does actionlake keep my Railway data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Railway credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Railway today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.