Skip to content

Development integration

Railway MCP server for Claude, Codex and Cursor

Manage Railway projects, services and deployments. Connect the Railway MCP server to Toolstile once, then choose which of its tools Claude Code, Codex, Cursor and Claude Desktop may use.

Free plan available. Server credentials stay in Toolstile, not in agent configs.

On this page

What your AI apps can do with Railway

  • Inspect projects, services and deployments
  • Read logs and manage variables

Railway MCP tools

11 tools, taken from the publisher's documentation on 29 October 2026. The server decides what it offers and can add or rename tools at any time; after you connect, Toolstile shows the current list.

ToolWhat it does
whoamiShow the signed-in Railway account
list-projectsList projects you can access
list-servicesList services in a project
create-projectCreate a new Railway project
list-feature-flagsList feature flags
get-feature-flagRead one feature flag
set-feature-flagCreate or change a feature flag (admin)
delete-feature-flagDelete a feature flag (admin; marked destructive)
redeployRedeploy a service
accept-deployCommit staged changes and deploy (marked destructive)
railway-agentSend a plain-language request to Railway's AI agent for multi-step work like log analysis, debugging and service configuration

Suggested access for each AI app

The documentation this list comes from doesn't mark Railway's tools as read-only or destructive. Read each tool's description and decide per app before allowing it.

Coding agent in Claude Code or Cursor. Allow the read tools so the agent can look things up without stopping, and require approval for tools that change shared data.

Chat or research app in Claude Desktop. Allow reading and searching. Allow writes only where you want the app to act for you.

Unattended agent, such as a scheduled Codex job. No one is watching the session, so keep it narrow: allow what the job needs, require approval for changes and block the rest.

Blocked tools are removed from the tool list an app sees, so it won't try them. Because rules apply per app, the same Railway connection can be broad in one app and read-only in another, and the credential stays in Toolstile instead of each app's config file.

How it works with Toolstile

  1. Connect once. Add Railway to a workspace (browser sign-in). Toolstile keeps the credential, so no agent config holds it.
  2. Choose access per app. Give Claude Code every Railway tool, give Cursor only the read tools, or keep Railway away from an app entirely.
  3. Share approved accounts. Teammates use the connection without copying tokens, and you can remove access in one place.
  4. Review activity. See which app called which tool and when, so you can tighten access with evidence.

Add the Railway MCP server to an AI app

Through Toolstile, every AI app uses one gateway entry, whichever servers you connect. In Claude Code:

Shell
claude mcp add --transport http toolstile 'https://mcp.toolstile.com/mcp'

Then connect Railway in your workspace and choose which of its tools that app may use. Client setup covers Codex, Cursor and Claude Desktop.

To connect directly instead, add the Railway endpoint to each app separately. In Claude Code:

Shell
claude mcp add --transport http railway 'https://mcp.railway.com'

In Cursor's mcp.json:

JSON
{
  "mcpServers": {
    "railway": {
      "url": "https://mcp.railway.com"
    }
  }
}

Some servers accept only clients they have approved, or need a token header. Check the Railway MCP documentation for what your client needs.

Before you connect

A Railway account. Sign-in uses your Railway permissions.

Server details

DetailValue
PublisherRailway
Endpointhttps://mcp.railway.com
AuthenticationBrowser sign-in
CategoriesDevelopment
Tool list11 tools, observed 29 October 2026 (docs)

Railway MCP documentation