Reported issues for mcp-server

Pod holds 10 of 10 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to mcp-server.

Most discussed

Windows: execFile("railway", ...) fails to resolve railway.cmd shim — all tools return "Railway CLI is not installed"

Bug

On Windows, every MCP tool that calls runRailwayCommand (src/cli/core.ts:11) fails with:

Error: Railway CLI error: Railway CLI is not installed. Please install it first: https://docs.railway.com/guides/cli
Next Steps:
  • Ensure you are logged into Railway CLI (`railway login`)
  • Check that you have a project linked (`railway link`)
  ...

— even when the Railway CLI is correctly installed an

Read the thread · 2026-05-21 · closed · external user · 1 comment

workspacePath parameter is case-sensitive on Windows (drive letter)

Description

The workspacePath parameter passed to MCP tools (e.g., list-services, list-variables) is case-sensitive on Windows for the drive letter prefix.

Reproduction

• OS: Windows 10/11
• @railway/mcp-server version: 0.1.8
• Railway CLI: 4.33.0

// Fails - lowercase drive letter
list-services({ workspacePath: "c:/Users/user/Documents/my-project" })
// => "No Railway project is linked"

// Works - uppercase drive letter
list-services({ workspacePath: "C:/Us

[Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/28) · 2026-04-18 · closed · external user · 1 comment

### set-variables silently corrupts long base64 env var values

## Bug Description

The `set-variables` tool silently corrupts characters in long base64-encoded environment variable values. A single character substitution (`8` → `4`) was observed in a 3156-character base64 string, causing the decoded content to be invalid.

## Steps to Reproduce

1. Set a long base64-encoded env var (e.g., Firebase service account credentials, ~3000+ chars) using the `set-variables` MCP tool
2. Retrieve the env var from the running service (e.g., via `railway run`)
3. Compar

[Read the thread](https://github.com/railwayapp/railway-mcp-server/issues/26) · 2026-04-12 · closed · external user · 1 comment

### Cannot find package 'graphql' when trying to run the MCP server

I am trying to run the MCP server following the provided instructions and I am getting the following error:

node:internal/modules/package_json_reader:301 throw new ERR_MODULE_NOT_FOUND(packageName, fileURLToPath(base), null); ^

Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'graphql' imported from /Users/josevelazquez/.npm/_npx/ac57a174e2011f0b/node_modules/graphql-request/build/legacy/lib/graphql.js at Object.getPackageJSONURL (node:internal/modules/package_json_reader:30

Read the thread · 2026-04-10 · closed · external user · 1 comment

Security Vulnerability: Command Injection in multiple railway-mcp-server tools due to unsafe use of child_process.exec

Hi @m-abdelwahab ,

I recently found a possible command injection vulnerability in this project.

For responsible disclosure, I am reporting it here before public disclosure.

Please take a look when convenient. Detailed information and PoC are provided as follows:

railway-mcp-server_bug.pdf

I am happy to help with further verification or fixing if needed.

Thank you for your time.

Yinci Chen

Read the thread · 2026-03-19 · closed · external user · 3 comments

deployRailwayProject re-links CLI to wrong service after deploy

Disclaimer: Claude Code agent output

Bug

After deployRailwayProject() completes a deploy, the post-deploy hook in deployment.ts re-links the CLI to services[0] — the first service returned by getRailwayServices(). This is often a database service (e.g., Postgres), not the application service that was just deployed.

Impact

If the user (or an AI agent) runs another deploy without noticing the re-link, railway up targets the database service, uploading local application code as

Read the thread · 2026-02-06 · closed · external user · 1 comment

Get-Logs hangs in Cursor

Reporting an issue:

Whenever using the 'get-logs' command, spinner just keeps spinning, no output. Not sure if this is a railway or a cursor issue:

This has been happening for the last couple of days.

this is the onlyt output I see:

Read the thread · 2025-09-16 · closed · external user · 2 comments

Provide Claude Code configuration

I've added 'npx -y "@railway/mcp-server""' to claude code mcp config but it could not connect to the mcp server.

When I tested running npx -y "@railway/mcp-server" on the command line, it did not output anything.

That'd be great if you could provide Claude Code configuration in your README.md

Read the thread · 2025-08-15 · closed · external user · 4 comments

Most recent

Orphaned stdio processes accumulate in long-lived clients (Claude Code); consider HTTP/SSE transport

Summary

@railway/mcp-server is stdio-only, and when it runs inside a long-lived client (Claude Code, Cursor, etc.) old server processes accumulate as orphans instead of exiting cleanly when the client drops the stdio connection. Over a few days of normal use I found 71 live railway-mcp-server processes on a single workstation, spawned across 40+ distinct start timestamps.

Environment

• Client: Claude Code (multiple long-lived sessions, some 7+ days old)
• Transport: stdio via `n

Read the thread · 2026-04-14 · closed · external user · 1 comment

Security audit: Hidden Unicode characters found in tool descriptions (Score: 0/100)

Hey — we ran an automated security scan of the Railway MCP server using the AgentsID Scanner and wanted to share the results.

Summary

Key Findings

**Hidden

Read the thread · 2026-04-08 · closed · external user · 0 comments

The remaining reports are on the project's issue tracker.