railway-mcp-server

Security Findings (21)

• HighExcessive Permission Surface

  generate-domain:tool declares network permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• MediumExcessive Permission Surface ×19

  • create-environment:tool declares fs permission
  • create-environment:tool declares env permission
  • create-project-and-link:tool declares fs permission
  • deploy-template:tool declares fs permission
  • deploy:tool declares fs permission
  • deploy:tool declares env permission
  • generate-domain:tool declares fs permission
  • get-logs:tool declares fs permission
  • get-logs:tool declares env permission
  • link-environment:tool declares fs permission
  • link-environment:tool declares env permission
  • link-service:tool declares fs permission
  • list-deployments:tool declares fs permission
  • list-deployments:tool declares env permission
  • list-services:tool declares fs permission
  • list-variables:tool declares fs permission
  • list-variables:tool declares env permission
  • set-variables:tool declares fs permission
  • set-variables:tool declares env permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• LowDoS Resilience — Missing Rate Limit / Timeout

  generate-domain:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  Rule: AS-011Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.