---
title: "Railway MCP server for AI agents - actionlake"
description: "Give Claude 391 Railway actions through one MCP server: deployments, regions, volumes. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/railway
updated: 2026-10-23
---

Connectors · Developer & infrastructure

# Railway MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Railway and the rest of your systems. It gives your agent 391 Railway actions (162 reads, 164 writes and 65 that wait for a confirmation) and holds the Railway credential itself, so the agent never does. It paces Railway's limits and records every call.

[Connect Railway free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "railway.regions.list",
  intent: "check which Railway account is connected"
}
# List regions · read · 1 upstream call
```

- 391 actions in one signed file
- 162 read look, never change
- 164 write create and update
- 65 wait for a yes destructive, confirmed first

Set up

## Connect Railway in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Railway.
   Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_token` Railway account or workspace token: railway.com/account/tokens (choose 'No workspace' for an account token, or a…
   ```
   account { op: "connections.requirements", service: "railway" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "railway.regions.list" }
   # list regions · read · 1 upstream call
   check { action: "railway.volumes.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Railway at a glance

**Sign-in**

Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_token`

**Limits we pace to**

10 calls a second and 10,000 an hour, per connection

**API covered**

Railway (cloud application platform) API graphql-v2`backboard.railway.com`

**Built from**

Railway's documentation, read 23 October 2026[docs.railway.com](https://docs.railway.com/reference/public-api) [backboard.railway.com](https://backboard.railway.com/graphql/v2%20(introspection))

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

149 of 162 reads, for up to an hour; a write clears what it affects

**Shared entities**

2, so ask can line Railway up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Railway.

391 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest.

- **162** read look, never change
- **164** write create and update
- **65** destructive wait for a confirmation

1. ### Railway
   391
   162 read · 164 write · 65 destructive
   List deployments · Get deployment · List regions · List ssh public keys

Top actions

## The Railway API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 26 of Railway's 26 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `railway.deployments.list` List deployments | Get all deployments | read | `devops.deployment.list` 22 connectors |
| `railway.deployments.get` Get deployment | Find a single deployment | read | `devops.deployment.get` 22 connectors |
| `railway.regions.list` List regions | List available regions | read | `infra.region.list` 16 connectors |
| `railway.volumes.create` Volume create | Create a persistent volume in a project | write | `infra.volume.create` 8 connectors |
| `railway.ssh_public_keys.list` List ssh public keys | Gets SSH public keys | read | `infra.ssh_key.list` 8 connectors |
| `railway.users.me` Get me | Gets the authenticated user. | read | `identity.current_user.get` 307 connectors |
| `railway.api_tokens.create` Api token create | Creates a new API token. | write | `identity.api_key.create` 100 connectors |
| `railway.api_tokens.list` List api tokens | Gets all API tokens for the authenticated user. | read | `identity.api_key.list` 96 connectors |
| `railway.environments.list` List environments | Gets all environments for a project. | read | `devops.environment.list` 24 connectors |
| `railway.ssh_public_keys.create` Ssh public key create | Creates a new SSH public key | write | `infra.ssh_key.create` 6 connectors |
| `railway.environments.create` Environment create | Creates a new environment. | write | `devops.environment.create` 18 connectors |
| `railway.deployments.cancel` Deployment cancel | Cancels a deployment. | destructive | `devops.deployment.cancel` 7 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Railway actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in Railway? List every user and their role.
   calls `railway.project_members.list`
2. Write write
   Volume create in Railway. Show me exactly what you will send before you save it.
   calls `railway.volumes.create`

Governance for Railway

## Destructive actions wait for a yes.

65 Railway actions are destructive. The first 10:

- Deployment cancel `railway.deployments.cancel`
- Volume delete `railway.volumes.delete`
- Ssh public key delete `railway.ssh_public_keys.delete`
- Api token delete `railway.api_tokens.delete`
- Environment delete `railway.environments.delete`
- Notification rule delete `railway.notification_rules.delete`
- Project transfer `railway.projects.transfer`
- Project transfer confirm `railway.projects.transfer_confirm`
- Project transfer initiate `railway.projects.transfer_initiate`
- Environment iac partial transfer `railway.environments.iac_partial_transfer`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do railway.deployments.cancel confirm_policy: **human**

Deployment cancel?

**intent:** the user asked me to deployment cancel

run suspended · waiting for a named person · key _railway-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "railway-agent",
  allowed_actions: ["railway.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "railway.deployments.cancel", approver: "lead@example.com" },
    { match: "railway.volumes.delete", approver: "lead@example.com" },
    { match: "railway.ssh_public_keys.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Railway only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Railway costs on actionlake.

Every Railway action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Railway refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 391 Railway actions
- 28 actions page each page of a long list is one call
- 149 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Railway action.

391 actions by area: the id your agent calls, what it does, and its effect.

**Railway 391**

- `railway.access_group_members.add` Access group member add write
- `railway.access_group_members.remove` Access group member remove destructive
- `railway.access_group_projects.attach` Access group project attach write
- `railway.access_group_projects.detach` Access group project detach destructive
- `railway.access_groups.create` Access group create write
- `railway.access_groups.delete` Access group delete destructive
- `railway.access_groups.update` Access group update write
- `railway.all_platform_feature_flags.list` List all platform feature flags read
- `railway.api_tokens.create` Api token create write
- `railway.api_tokens.current` Get api token read
- `railway.api_tokens.delete` Api token delete destructive
- `railway.api_tokens.list` List api tokens read
- `railway.audit_log_event_types.list` List audit log event type info read
- `railway.audit_logs.get` Get audit log read
- `railway.audit_logs.list` List audit logs read
- `railway.bot_scope_bindings.list` List bot scope bindings read
- `railway.bot_scope_bindings.remove` Bot scope binding remove destructive
- `railway.bucket_credentials.reset` Bucket credentials reset write
- `railway.bucket_instance_details.get` Get bucket instance details read
- `railway.bucket_s3_credentials.list` List bucket s3 credentials read
- `railway.buckets.create` Bucket create write
- `railway.buckets.update` Bucket update write
- `railway.build_logs.list` List build logs read
- `railway.canvas_views.merge` Canvas view merge write
- `railway.canvas_views.merge_preview` Get canvas view merge preview read
- `railway.changelog_block_image.get` Get changelog block image read
- `railway.clearance_tokens.create` Clearance token create write
- `railway.clearance_tokens.revoke` Clearance token revoke destructive
- `railway.cloud_agent_checkpoints.create` Cloud agent checkpoint create write
- `railway.cloud_agent_checkpoints.delete` Cloud agent checkpoint delete destructive
- `railway.cloud_agent_checkpoints.get` Get cloud agent checkpoint read
- `railway.cloud_agent_checkpoints.list` List cloud agent checkpoints read
- `railway.cloud_agent_console_sessions.list` List cloud agent console sessions read
- `railway.cloud_agent_feedback.create` Cloud agent feedback create write
- `railway.cloud_agent_sessions.rename` Cloud agent session rename write
- `railway.cloud_agent_task_models.list` Get cloud agent task models read
- `railway.cloud_agent_tasks.cancel` Cloud agent task cancel destructive
- `railway.cloud_agent_tasks.dispatch` Cloud agent task dispatch write
- `railway.cloud_agent_tasks.get` Get cloud agent task read
- `railway.cloud_agent_tasks.list` List cloud agent tasks read
- `railway.cloud_agent_tasks.recover` Cloud agent task recover write
- `railway.cloud_agent_tasks.respond` Cloud agent task respond write
- `railway.cloud_agents.archive` Cloud agent archive write
- `railway.cloud_agents.create` Cloud agent create write
- `railway.cloud_agents.delete` Cloud agent delete destructive
- `railway.cloud_agents.deploy` Cloud agent deploy write
- `railway.cloud_agents.fork` Cloud agent fork write
- `railway.cloud_agents.get` Get cloud agent read
- `railway.cloud_agents.list` List cloud agents read
- `railway.cloud_agents.mark_seen` Cloud agent mark seen write
- `railway.cloud_agents.sleep` Cloud agent sleep write
- `railway.cloud_agents.unarchive` Cloud agent unarchive write
- `railway.cloud_agents.wake` Cloud agent wake write
- `railway.compliance_agreements.get` Get compliance agreements read
- `railway.custom_domains.check_available` Get custom domain available read
- `railway.custom_domains.create` Custom domain create write
- `railway.custom_domains.delete` Custom domain delete destructive
- `railway.custom_domains.get` Get custom domain read
- `railway.custom_domains.issue_certificate` Custom domain issue certificate write
- `railway.custom_domains.update` Custom domain update write
- `railway.customers.create_free_plan_subscription` Customer create free plan subscription write
- `railway.customers.toggle_payouts_to_credits` Customer toggle payouts to credits destructive
- `railway.deployment_events.list` List deployment events read
- `railway.deployment_instance_executions.create` Deployment instance execution create write
- `railway.deployment_instance_executions.list` List deployment instance executions read
- `railway.deployment_logs.list` List deployment logs read
- `railway.deployment_snapshots.get` Get deployment snapshot read
- `railway.deployment_triggers.create` Deployment trigger create write
- `railway.deployment_triggers.delete` Deployment trigger delete destructive
- `railway.deployment_triggers.list` List deployment triggers read
- `railway.deployment_triggers.update` Deployment trigger update write
- `railway.deployments.approve` Deployment approve write
- `railway.deployments.cancel` Deployment cancel destructive
- `railway.deployments.get` Get deployment read
- `railway.deployments.list` List deployments read
- `railway.deployments.redeploy` Deployment redeploy write
- `railway.deployments.remove` Deployment remove destructive
- `railway.deployments.restart` Deployment restart write
- `railway.deployments.rollback` Deployment rollback write
- `railway.deployments.stop` Deployment stop destructive
- `railway.dns_query_logs.list` List dns query logs read
- `railway.domains.list_for_service` Get domains read
- `railway.egress_gateway_legacy_preview.list` List egress gateway legacy preview read
- `railway.egress_gateways.clear` Egress gateway associations clear destructive
- `railway.egress_gateways.create` Egress gateway association create write
- `railway.egress_gateways.ha_migration_preview` Egress gateway ha migration preview read
- `railway.egress_gateways.ha_preview` List egress gateway ha preview read
- `railway.egress_gateways.list` List egress gateways read
- `railway.egress_gateways.rollback_from_ha` Egress gateway rollback from ha write
- `railway.egress_gateways.upgrade_to_ha` Egress gateway upgrade to ha write
- `railway.environment_change_sets.apply` Environment apply change set write
- `railway.environment_change_sets.apply_status` Get environment change set apply read
- `railway.environment_change_sets.preview` Environment preview change set read
- `railway.environment_config_plan_comments.upsert` Environment config plan comment upsert write
- `railway.environment_history.list` List environment history read
- `railway.environment_logs.list` List environment logs read
- `railway.environment_patches.commit` Environment patch commit write
- `railway.environment_patches.commit_staged` Environment patch commit staged write
- `railway.environment_patches.get` Get environment patch read
- `railway.environment_patches.list` List environment patches read
- `railway.environment_patches.restage` Environment patch restage write
- `railway.environment_patches.stage_changes` Environment stage changes write
- `railway.environment_patches.staged` Get environment staged changes read
- `railway.environments.create` Environment create write
- `railway.environments.delete` Environment delete destructive
- `railway.environments.get` Get environment read
- `railway.environments.has_legacy_static_egress` Get environment has legacy static egress read
- `railway.environments.iac_partial_release` Environment iac partial release write
- `railway.environments.iac_partial_transfer` Environment iac partial transfer destructive
- `railway.environments.import_docker_compose` Docker compose import write
- `railway.environments.list` List environments read
- `railway.environments.override_base` Base environment override write
- `railway.environments.pending_work` List environment pending work read
- `railway.environments.rename` Environment rename write
- `railway.environments.trigger_deploy` Environment triggers deploy write
- `railway.environments.unskip_service` Environment unskip service write
- `railway.environments.update_clearance_default` Environment clearance default update write
- `railway.events.list` List events read
- `railway.external_workspaces.list` List external workspaces read
- `railway.feature_flags.add` Feature flag add write
- `railway.feature_flags.remove` Feature flag remove destructive
- `railway.function_runtimes.get` Get function runtime read
- `railway.function_runtimes.list` List function runtimes read
- `railway.github_pull_requests.info` Get github pr info read
- `railway.github_pull_requests.info_result` Get github pr info result read
- `railway.github_repo_branches.list` List github repo branches read
- `railway.github_repos.check_access` Get git hub repo access available read
- `railway.github_repos.check_name_available` Get github is repo name available read
- `railway.github_repos.deploy` Github repo deploy write
- `railway.github_repos.get` Get github repo read
- `railway.github_repos.list` List github repos read
- `railway.github_repos.update` Github repo update write
- `railway.github_ssh_keys.list` List git hub ssh keys read
- `railway.github_writable_scopes.list` List github writable scopes read
- `railway.heroku.import_variables` Heroku import variables write
- `railway.heroku_apps.list` List heroku apps read
- `railway.http_duration_metrics.get` Get http duration metrics read
- `railway.http_logs.list` List http logs read
- `railway.http_metrics.get` Get http metrics read
- `railway.http_metrics.grouped_by_status` List http metrics grouped by status read
- `railway.integration_auths.get` Get integration auth read
- `railway.integration_auths.list` List integration auths read
- `railway.integrations.create` Integration create write
- `railway.integrations.delete` Integration delete destructive
- `railway.integrations.list` List integrations read
- `railway.integrations.update` Integration update write
- `railway.invite_codes.get` Get invite code read
- `railway.invite_codes.use` Invite code use write
- `railway.metrics.list` List metrics read
- `railway.my_cloud_agents.list` List my cloud agents read
- `railway.mysql_pitr.restorable_window` Get mysql pitr restorable window read
- `railway.network_flow_logs.list` List network flow logs read
- `railway.notification_deliveries.get` Get notification delivery read
- `railway.notification_deliveries.list` List notification deliveries read
- `railway.notification_deliveries.mark_as_read` Notification deliveries mark as read write
- `railway.notification_rules.create` Notification rule create write
- `railway.notification_rules.delete` Notification rule delete destructive
- `railway.notification_rules.list` List notification rules read
- `railway.notification_rules.update` Notification rule update write
- `railway.observability_dashboards.create` Observability dashboard create write
- `railway.observability_dashboards.list` List observability dashboards read
- `railway.observability_dashboards.reset` Observability dashboard reset write
- `railway.observability_dashboards.update` Observability dashboard update write
- `railway.passkeys.list` List passkeys read
- `railway.pitr_ha_clusters.cancel_workflow` Cancel pitr ha workflow destructive
- `railway.pitr_ha_clusters.clear_workflow_progress` Clear pitr ha workflow progress destructive
- `railway.pitr_ha_clusters.disable_pitr` Disable pitr for ha cluster write
- `railway.pitr_ha_clusters.enable_pitr` Enable pitr for ha cluster write
- `railway.pitr_ha_clusters.replication_health` Get pitr ha cluster replication health read
- `railway.pitr_ha_clusters.workflow_progress` Get pitr ha workflow progress read
- `railway.platform_status.get` Get platform status read
- `railway.preferences.get` Get preferences read
- `railway.preferences.update` Preferences update write
- `railway.private_network_endpoints.check_name_available` Get private network endpoint name available read
- `railway.private_network_endpoints.get` Get private network endpoint read
- `railway.private_network_endpoints.rename` Private network endpoint rename write
- `railway.private_networks.list` List private networks read
- `railway.project_feature_flags.add` Project feature flag add write
- `railway.project_feature_flags.remove` Project feature flag remove destructive
- `railway.project_invitations.accept` Project invitation accept write
- `railway.project_invitations.create` Project invitation create write
- `railway.project_invitations.delete` Project invitation delete destructive
- `railway.project_invitations.get` Get project invitation read
- `railway.project_invitations.list` List project invitations read
- `railway.project_invitations.resend` Project invitation resend write
- `railway.project_invite_codes.get` Get project invite code read
- `railway.project_members.add` Project member add write
- `railway.project_members.list` List project members read
- `railway.project_members.remove` Project member remove destructive
- `railway.project_members.update` Project member update write
- `railway.project_members.workspace_members` Get project workspace members read
- `railway.project_tokens.create` Project token create write
- `railway.project_tokens.current` Get project token read
- `railway.project_tokens.delete` Project token delete destructive
- `railway.project_tokens.list` List project tokens read
- `railway.projects.cancel_scheduled_delete` Project schedule delete cancel write
- `railway.projects.claim` Project claim write
- `railway.projects.compliance` Get project compliance read
- `railway.projects.create` Project create write
- `railway.projects.delete` Project delete destructive
- `railway.projects.favorites` List project favorites read
- `railway.projects.force_delete` Project schedule delete force destructive
- `railway.projects.get` Get project read
- `railway.projects.get_many` List projects by ids read
- `railway.projects.invite_user` Project invite user write
- `railway.projects.leave` Project leave destructive
- `railway.projects.list` List projects read
- `railway.projects.resource_access` Get project resource access read
- `railway.projects.schedule_delete` Project schedule delete destructive
- `railway.projects.set_favorite` Project favorite set write
- `railway.projects.transfer` Project transfer destructive
- `railway.projects.transfer_confirm` Project transfer confirm destructive
- `railway.projects.transfer_initiate` Project transfer initiate destructive
- `railway.projects.update` Project update write
- `railway.projects.update_clearance_default` Project clearance default update write
- `railway.provider_auths.remove` Provider auth remove destructive
- `railway.public_stats.get` Get public stats read
- `railway.railway_domain_dns_records.create` Railway domain dns record create write
- `railway.railway_domain_dns_records.delete` Railway domain dns record delete destructive
- `railway.railway_domain_dns_records.list` List railway domain dns records read
- `railway.railway_domain_dns_records.update` Railway domain dns record update write
- `railway.railway_domain_email_forwarding.eligibility` Get railway domain email forwarding eligibility read
- `railway.railway_domain_email_forwarding.limits` Get railway domain email forwarding limits read
- `railway.railway_domain_email_forwarding_rules.create` Railway domain email forwarding rule create destructive
- `railway.railway_domain_email_forwarding_rules.delete` Railway domain email forwarding rule delete destructive
- `railway.railway_domain_email_forwarding_rules.list` List railway domain email forwarding rules read
- `railway.railway_domain_email_forwarding_rules.remove_all` Railway domain email forwarding remove all destructive
- `railway.railway_domain_email_forwarding_rules.send_test` Railway domain email forwarding rule send test destructive
- `railway.railway_domain_email_forwarding_rules.update` Railway domain email forwarding rule update destructive
- `railway.railway_domains.get` Get railway domain read
- `railway.railway_domains.get_by_name` Get railway domain by name read
- `railway.railway_domains.list` List railway domains read
- `railway.railway_domains.set_nameservers` Railway domain nameservers set write
- `railway.railway_domains.update` Railway domain update write
- `railway.referral_info.get` Get referral info read
- `railway.referral_info.update` Referral info update write
- `railway.regions.list` List regions read
- `railway.resource_access.get` Get resource access read
- `railway.sandbox_checkpoints.create` Sandbox checkpoint create write
- `railway.sandbox_checkpoints.delete` Sandbox checkpoint delete destructive
- `railway.sandbox_checkpoints.list` List sandbox checkpoints read
- `railway.sandbox_checkpoints.rename` Sandbox checkpoint rename write
- `railway.sandbox_sessions.list` List sandbox sessions read
- `railway.sandbox_template_builds.create` Sandbox template build write
- `railway.sandbox_template_builds.get` Get sandbox template build read
- `railway.sandboxes.create` Sandbox create write
- `railway.sandboxes.destroy` Sandbox destroy destructive
- `railway.sandboxes.exec` Sandbox exec write
- `railway.sandboxes.get` Get sandbox read
- `railway.sandboxes.heartbeat` Sandbox heartbeat write
- `railway.sandboxes.list` List sandboxes read
- `railway.service_cdn.disable` Disable service cdn write
- `railway.service_cdn.enable` Enable service cdn write
- `railway.service_cdn.purge_cache` Purge service cache destructive
- `railway.service_domains.check_available` Get service domain available read
- `railway.service_domains.create` Service domain create write
- `railway.service_domains.delete` Service domain delete destructive
- `railway.service_domains.update` Service domain update write
- `railway.service_edge_configs.set_under_attack_mode` Set service under attack mode write
- `railway.service_edge_configs.update` Update service edge config write
- `railway.service_edge_rules.update` Update service edge rules write
- `railway.service_edge_rules.validate` Get validate service edge rules read
- `railway.service_feature_flags.add` Service feature flag add write
- `railway.service_feature_flags.remove` Service feature flag remove destructive
- `railway.service_instance_limits.get` Get service instance limits read
- `railway.service_instance_limits.override` Get service instance limit override read
- `railway.service_instance_limits.update` Service instance limits update write
- `railway.service_instances.auto_deploy_status` Get service instance auto deploy status read
- `railway.service_instances.clear_auto_update_snooze` Service instance auto update snooze clear write
- `railway.service_instances.deploy` Service instance deploy write
- `railway.service_instances.deploy_v2` Service instance deploy v2 write
- `railway.service_instances.dismiss_vuln_remediation` Service instance vuln remediation dismiss write
- `railway.service_instances.get` Get service instance read
- `railway.service_instances.is_updatable` Get service instance is updatable read
- `railway.service_instances.patch_vuln_now` Service instance vuln remediation patch now write
- `railway.service_instances.redeploy` Service instance redeploy write
- `railway.service_instances.snooze_auto_update` Service instance auto update snooze write
- `railway.service_instances.update` Service instance update write
- `railway.service_instances.update_auto_deploy` Service instance auto deploy update write
- `railway.service_instances.update_auto_update_schedule` Service instance auto update schedule update write
- `railway.service_instances.update_clearance` Service instance clearance update write
- `railway.services.connect` Service connect write
- `railway.services.create` Service create write
- `railway.services.delete` Service delete destructive
- `railway.services.disconnect` Service disconnect destructive
- `railway.services.get` Get service read
- `railway.services.remove_upstream_url` Service remove upstream url write
- `railway.services.update` Service update write
- `railway.sessions.delete` Session delete destructive
- `railway.sessions.list` List sessions read
- `railway.shell_tokens.generate` Generate shell token write
- `railway.signal_changes.list` List signal changes read
- `railway.signals.create` Signal create write
- `railway.signals.delete` Signal delete destructive
- `railway.signals.evaluate` Get signal evaluate read
- `railway.signals.get` Get signal read
- `railway.signals.list` List signals read
- `railway.signals.replace` Signal replace write
- `railway.signals.rollback` Signal rollback write
- `railway.signals.set_default` Signal default set write
- `railway.signals.set_rule` Signal rule set write
- `railway.signals.unset_rule` Signal rule unset destructive
- `railway.slack_channels.upsert` Upsert slack channel write
- `railway.ssh_public_keys.create` Ssh public key create write
- `railway.ssh_public_keys.delete` Ssh public key delete destructive
- `railway.ssh_public_keys.list` List ssh public keys read
- `railway.tcp_proxies.delete` Tcp proxy delete destructive
- `railway.tcp_proxies.list` List tcp proxies read
- `railway.template_metrics.get` Get template metrics read
- `railway.templates.clone` Template clone write
- `railway.templates.count` Get templates count read
- `railway.templates.delete` Template delete destructive
- `railway.templates.deploy_v2` Template deploy v2 write
- `railway.templates.eject_service_source` Template service source eject write
- `railway.templates.generate` Template generate write
- `railway.templates.get` Get template read
- `railway.templates.list` List templates read
- `railway.templates.publish` Template publish write
- `railway.templates.revert` Template revert write
- `railway.templates.search` Search template read
- `railway.templates.source_for_project` Get template source for project read
- `railway.templates.unpublish` Template unpublish destructive
- `railway.templates.update_volume` Template volume update write
- `railway.traces.get_spans` List trace read
- `railway.traces.list` List traces read
- `railway.tracing_status.list` List tracing status read
- `railway.trusted_domains.create` Trusted domain create write
- `railway.trusted_domains.delete` Trusted domain delete destructive
- `railway.trusted_domains.list` List trusted domains read
- `railway.trusted_domains.retrigger_verification` Trusted domain retrigger verification write
- `railway.trusted_domains.update` Trusted domain update write
- `railway.two_factor_info.get` Get two factor info read
- `railway.usage.agent` Get agent usage read
- `railway.usage.estimated` List estimated usage read
- `railway.usage.get` List usage read
- `railway.usage.project_service` List project service usage read
- `railway.usage.workspace_totals` List workspace usage totals read
- `railway.usage_limits.remove` Usage limit remove destructive
- `railway.usage_limits.set` Usage limit set write
- `railway.usage_limits.set_agent` Agent usage limit set write
- `railway.user_profiles.get` Get user profile read
- `railway.users.accept_terms` User terms update write
- `railway.users.agree_fair_use` Fair use agree write
- `railway.users.disconnect_discord` User discord disconnect destructive
- `railway.users.me` Get me read
- `railway.users.update_profile` User profile update write
- `railway.variables.configure_shared` Shared variable configure write
- `railway.variables.delete` Variable delete destructive
- `railway.variables.for_service_deployment` Get variables for service deployment read
- `railway.variables.list` Get variables read
- `railway.variables.upsert` Variable upsert write
- `railway.variables.upsert_collection` Variable collection upsert write
- `railway.vercel_info.get` Get vercel info read
- `railway.volume_instance_backup_schedules.list` List volume instance backup schedule list read
- `railway.volume_instance_backup_schedules.update` Volume instance backup schedule update write
- `railway.volume_instance_backups.create` Volume instance backup create write
- `railway.volume_instance_backups.delete` Volume instance backup delete destructive
- `railway.volume_instance_backups.list` List volume instance backup list read
- `railway.volume_instance_backups.lock` Volume instance backup lock write
- `railway.volume_instance_backups.restore` Volume instance backup restore write
- `railway.volume_instances.get` Get volume instance read
- `railway.volume_instances.pitr_restore` Volume instance pitr restore write
- `railway.volume_instances.pitr_restore_estimate` Get volume instance pitr restore estimate read
- `railway.volume_instances.update` Volume instance update write
- `railway.volumes.create` Volume create write
- `railway.volumes.delete` Volume delete destructive
- `railway.volumes.update` Volume update write
- `railway.webhooks.test` Webhook test write
- `railway.workflow_status.get` Get workflow status read
- `railway.workspace_identity_providers.list` List workspace identity providers read
- `railway.workspace_invite_codes.create` Workspace invite code create write
- `railway.workspace_invite_codes.use` Workspace invite code use write
- `railway.workspace_members.change_permission` Workspace permission change write
- `railway.workspace_members.invite` Workspace user invite write
- `railway.workspace_members.remove` Workspace user remove destructive
- `railway.workspace_policies.add_deploy_source` Workspace policy deploy source allowlist add write
- `railway.workspace_policies.get` Get workspace policy read
- `railway.workspace_policies.remove_deploy_source` Workspace policy deploy source allowlist remove destructive
- `railway.workspace_policies.selectable_deploy_sources` List workspace policy selectable deploy sources read
- `railway.workspace_policies.update_item` Workspace policy item update write
- `railway.workspace_templates.list` List workspace templates read
- `railway.workspaces.delete` Workspace delete destructive
- `railway.workspaces.get` Get workspace read
- `railway.workspaces.get_by_code` Get workspace by code read
- `railway.workspaces.leave` Workspace leave destructive
- `railway.workspaces.set_restrict_project_visibility` Workspace set restrict project visibility to groups write
- `railway.workspaces.update` Workspace update write
- `railway.workspaces.update_two_factor_enforcement` Workspace two factor enforcement update write
- `railway.workspaces.upsert_slack_channel` Workspace upsert slack channel write
- `railway.x_agent.claim_info` Get x agent claim info read
- `railway.x_agent.claim_project` X agent project claim write

Questions

## The Railway MCP server, answered.

**Is there a Railway MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 391 Railway actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Railway.

**What do I need to connect Railway?**

Railway account or workspace token: railway.com/account/tokens (choose 'No workspace' for an account token, or a…. The free call account { op: "connections.requirements", service: "railway" } lists exactly what to paste.

**Can an AI agent delete or change things in Railway?**

Only if its key allows it, and only with an explicit confirmation. 65 Railway actions are destructive, including deployment cancel, volume delete and ssh public key delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Railway API limit?**

actionlake paces every call to the limits in the Railway service file: 10 calls a second and 10,000 an hour per connection. Repeated reads are answered from cache (149 Railway actions can be), which never reaches Railway.

**What does a Railway action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (28 Railway actions page). Cache hits, searches, dry runs and calls Railway refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Railway API does it cover?**

The Railway (cloud application platform) API graphql-v2 at backboard.railway.com. It is built from Railway's documentation as read on 23 October 2026. 391 actions in 1 area, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Railway data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Railway credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Railway

Shares the most action names with

- [Render 11](https://actionlake.com/connectors/render)
- [Pulumi Cloud 10](https://actionlake.com/connectors/pulumi-cloud)
- [Upsun (Platform.sh) 9](https://actionlake.com/connectors/upsun-platform-sh)
- [env zero (env0) 7](https://actionlake.com/connectors/env-zero-env0)
- [HCP Terraform 6](https://actionlake.com/connectors/hcp-terraform)
- [Heroku Platform API 6](https://actionlake.com/connectors/heroku-platform-api)

Joins with, on shared entities

- [Octopus Deploy 2](https://actionlake.com/connectors/octopus-deploy)
- [Workato 2](https://actionlake.com/connectors/workato)
- [HaloPSA 1](https://actionlake.com/connectors/halopsa)
- [Slack 1](https://actionlake.com/connectors/slack)
- [Gusto 1](https://actionlake.com/connectors/gusto)
- [Microsoft 365 Users 1](https://actionlake.com/connectors/microsoft-365-users)

Browse

- [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Railway; the name is the vendor's own. Counts are from the Railway service file, version 1.0.0.

## Give your agent Railway today.

[Connect Railway free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/railway
More: https://actionlake.com/llms.txt