# Reported issues for mcp-server Pod holds 10 of 10 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user. Back to [mcp-server](/mcp/mcp-server-6). ## Most discussed ### Windows: `execFile("railway", ...)` fails to resolve `railway.cmd` shim — all tools return "Railway CLI is not installed" ## Bug On Windows, every MCP tool that calls `runRailwayCommand` ([`src/cli/core.ts:11`](https://github.com/railwayapp/railway-mcp-server/blob/main/src/cli/core.ts#L11)) fails with: ``` Error: Railway CLI error: Railway CLI is not installed. Please install it first: https://docs.railway.com/guides/cli Next Steps: • Ensure you are logged into Railway CLI (`railway login`) • Check that you have a project linked (`railway link`) ... ``` — even when the Railway CLI is correctly installed an [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/34) · 2026-05-21 · closed · external user · 1 comment ### workspacePath parameter is case-sensitive on Windows (drive letter) ## Description The `workspacePath` parameter passed to MCP tools (e.g., `list-services`, `list-variables`) is case-sensitive on Windows for the drive letter prefix. ## Reproduction - OS: Windows 10/11 - `@railway/mcp-server` version: 0.1.8 - Railway CLI: 4.33.0 ``` // Fails - lowercase drive letter list-services({ workspacePath: "c:/Users/user/Documents/my-project" }) // => "No Railway project is linked" // Works - uppercase drive letter list-services({ workspacePath: "C:/Us [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/28) · 2026-04-18 · closed · external user · 1 comment ### set-variables silently corrupts long base64 env var values ## Bug Description The `set-variables` tool silently corrupts characters in long base64-encoded environment variable values. A single character substitution (`8` → `4`) was observed in a 3156-character base64 string, causing the decoded content to be invalid. ## Steps to Reproduce 1. Set a long base64-encoded env var (e.g., Firebase service account credentials, ~3000+ chars) using the `set-variables` MCP tool 2. Retrieve the env var from the running service (e.g., via `railway run`) 3. Compar [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/26) · 2026-04-12 · closed · external user · 1 comment ### Cannot find package 'graphql' when trying to run the MCP server I am trying to run the MCP server following the provided instructions and I am getting the following error: ``` node:internal/modules/package_json_reader:301 throw new ERR_MODULE_NOT_FOUND(packageName, fileURLToPath(base), null); ^ Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'graphql' imported from /Users/josevelazquez/.npm/_npx/ac57a174e2011f0b/node_modules/graphql-request/build/legacy/lib/graphql.js at Object.getPackageJSONURL (node:internal/modules/package_json_reader:30 [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/24) · 2026-04-10 · closed · external user · 1 comment ### Security Vulnerability: Command Injection in multiple railway-mcp-server tools due to unsafe use of child_process.exec Hi @m-abdelwahab , I recently found a possible command injection vulnerability in this project. For responsible disclosure, I am reporting it here before public disclosure. Please take a look when convenient. Detailed information and PoC are provided as follows: [railway-mcp-server_bug.pdf](https://github.com/user-attachments/files/26108077/railway-mcp-server_bug.pdf) I am happy to help with further verification or fixing if needed. Thank you for your time. Yinci Chen [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/19) · 2026-03-19 · closed · external user · 3 comments ### deployRailwayProject re-links CLI to wrong service after deploy Disclaimer: Claude Code agent output ## Bug After `deployRailwayProject()` completes a deploy, the post-deploy hook in `deployment.ts` re-links the CLI to `services[0]` — the first service returned by `getRailwayServices()`. This is often a database service (e.g., Postgres), not the application service that was just deployed. ## Impact If the user (or an AI agent) runs another deploy without noticing the re-link, `railway up` targets the database service, uploading local application code as [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/15) · 2026-02-06 · closed · external user · 1 comment ### Get-Logs hangs in Cursor Reporting an issue: Whenever using the 'get-logs' command, spinner just keeps spinning, no output. Not sure if this is a railway or a cursor issue: Image This has been happening for the last couple of days. this is the onlyt output I see: Image [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/5) · 2025-09-16 · closed · external user · 2 comments ### Provide Claude Code configuration I've added `'npx -y "@railway/mcp-server""'` to claude code mcp config but it could not connect to the mcp server. When I tested running `npx -y "@railway/mcp-server"` on the command line, it did not output anything. That'd be great if you could provide Claude Code configuration in your README.md [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/2) · 2025-08-15 · closed · external user · 4 comments ## Most recent ### Orphaned stdio processes accumulate in long-lived clients (Claude Code); consider HTTP/SSE transport ## Summary `@railway/mcp-server` is stdio-only, and when it runs inside a long-lived client (Claude Code, Cursor, etc.) old server processes accumulate as orphans instead of exiting cleanly when the client drops the stdio connection. Over a few days of normal use I found **71 live `railway-mcp-server` processes** on a single workstation, spawned across 40+ distinct start timestamps. ## Environment - Client: Claude Code (multiple long-lived sessions, some 7+ days old) - Transport: stdio via `n [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/27) · 2026-04-14 · closed · external user · 1 comment ### Security audit: Hidden Unicode characters found in tool descriptions (Score: 0/100) Hey — we ran an automated security scan of the Railway MCP server using the [AgentsID Scanner](https://github.com/stevenkozeniesky02/agentsid-scanner) and wanted to share the results. ## Summary | Metric | Value | |--------|-------| | Tools scanned | 36 | | Security score | 0/100 (Grade: F) | | Critical findings | Hidden Unicode characters in tool descriptions | | High findings | 45 | | Medium findings | 65 | | Risk tags | destructive, deployment, credential_access | ## Key Findings **Hidden [Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/22) · 2026-04-08 · closed · external user · 0 comments The remaining reports are on [the project's issue tracker](https://github.com/railwayapp/railway-mcp-server/issues).