railway-mcp-server

Security Findings (108)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v0.1.11: 36 tool(s) added, 14 tool(s) removed without a version bump.

  + 36 added

  configure_api_tokendatabase_deploy_from_templatedatabase_list_typesdeployment_listdeployment_logsdeployment_statusdeployment_triggerdomain_checkdomain_createdomain_deletedomain_listdomain_updatelist_service_variablesproject_createproject_deleteproject_environmentsproject_infoproject_listservice_create_from_imageservice_create_from_reposervice_deleteservice_infoservice_listservice_restartservice_updatetcp_proxy_createtcp_proxy_deletetcp_proxy_listvariable_bulk_setvariable_copyvariable_deletevariable_setvolume_createvolume_deletevolume_listvolume_update

  − 14 removed

  check-railway-statuscreate-environmentcreate-project-and-linkdeploydeploy-templategenerate-domainget-logslink-environmentlink-servicelist-deploymentslist-projectslist-serviceslist-variablesset-variables

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• HighAS-002

  ⚠️Excessive Permissions ×4

  tool declares network permission

  domain_createtcp_proxy_createconfigure_api_token

  tool declares exec permission

  service_update

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• HighAS-010

  🔑Insecure Secret Handling

  configure_api_token:input parameter "token" appears to accept a secret or credential

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.

• MediumAS-002

  ⚠️Excessive Permissions ×43

  tool declares db permission

  database_list_typesdatabase_deploy_from_templatedeployment_triggerdeployment_logsdeployment_statusproject_createservice_create_from_reposervice_create_from_imagetcp_proxy_createvolume_listvolume_create

  tool declares env permission

  database_deploy_from_templatedeployment_listdeployment_triggerdomain_listdomain_createservice_infoservice_updateservice_restarttcp_proxy_listtcp_proxy_createlist_service_variablesvariable_setvariable_deletevariable_bulk_setvariable_copyconfigure_api_tokenvolume_create

  tool declares fs permission

  domain_createdomain_updatedomain_deleteproject_createproject_deleteservice_create_from_reposervice_create_from_imageservice_updateservice_deletetcp_proxy_createtcp_proxy_deletevariable_deletevolume_createvolume_updatevolume_delete

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-002

  ⚠️Excessive Permissions ×10

  tool declares http permission

  deployment_listdeployment_triggerdeployment_statusservice_updateservice_deleteservice_restartvariable_setvariable_deletevariable_bulk_setvariable_copy

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×13

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  deployment_listdeployment_triggerdeployment_statusdomain_createservice_updateservice_deleteservice_restarttcp_proxy_createvariable_setvariable_deletevariable_bulk_setvariable_copyconfigure_api_token

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×36

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  database_list_typesdatabase_deploy_from_templatedeployment_listdeployment_triggerdeployment_logsdeployment_statusdomain_listdomain_createdomain_checkdomain_updatedomain_deleteproject_listproject_infoproject_createproject_deleteproject_environmentsservice_listservice_infoservice_create_from_reposervice_create_from_imageservice_updateservice_deleteservice_restarttcp_proxy_listtcp_proxy_createtcp_proxy_deletelist_service_variablesvariable_setvariable_deletevariable_bulk_setvariable_copyconfigure_api_tokenvolume_listvolume_createvolume_updatevolume_delete

  Fix: Review and remediate the identified issue.