Automic VaultAutomic Vault

brew / protected-tool coverage

Install railway with Homebrew, apk, Nix, pacman, scoop

Develop and deploy code with zero configuration. Version 5.23.3 via Homebrew; verified 2026-06-30.

Install commandSecurity notes

agent safety

Agent safety answer

railway manages Railway projects, services, variables, and deployments.

Credential access

Reads Railway tokens, project links, and environment variable data.

Remote mutation

Can deploy, change variables, and mutate hosted services.

Publish/artifact risk

Publishes application builds and deployment state.

Recommended control

Gate deploy, variable, service, and token commands.

Agent-use guidance

Allow status reads; require approval for deploys, variable changes, and service mutations.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install railway

local Homebrew formula metadata

Windows

Scoopverified · 92%
scoop install main/railway

Scoop official bucket manifest trees · bucket/railway.json · source: api.github.com

overview

Package summary

Develop and deploy code with zero configuration

Commands and aliases

  • railway

protected-tool coverage

Plain Text Railway CLI Tokens

Railway CLI stores login state in JSON config files under ~/.railway, including legacy tokens and OAuth access/refresh tokens. Our isotope stores the Railway configs in the macOS keychain and injects them through a temporary HOME while `railway` runs.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Local README excerpt

Railway Protected-tool coverage

Railway CLI stores login state in JSON config files under ~/.railway, including legacy token values and OAuth accessToken / refreshToken values. The protected-tool coverage moves those configs into the macOS keychain and runs railway with a temporary home directory containing the injected configs.

Caveats

  • The production, staging, and development config files are migrated:

config.json, config-staging.json, and config-dev.json.

  • Login, logout, token refresh, and project link changes happen in temporary

runtime state and are not persisted back to the keychain.

  • Direct execution of the original binary will not receive credentials.

Source: local coverage notes

Coverage source

Local secret-handling manifest

Caveats

  • Runtime login/logout/token refresh changes are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.railway/config.json~/.railway/config-dev.json~/.railway/config-staging.json

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.railway/config.json~/.railway/config-dev.json~/.railway/config-staging.json

executables

Installed executables

CommandKindExposureNote
railwaycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-07
manager version5.23.3
manager updated2026-06-30
local dataok
upstreamcurrent
latest detectedv5.23.3

https://github.com/railwayapp/cli

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:railway
Version5.23.3
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/railway
Homepagehttps://railway.com/
Repositoryhttps://github.com/railwayapp/cli
Upstream docshttps://docs.railway.com/cli
LicenseMIT
Source archivehttps://github.com/railwayapp/cli/archive/refs/tags/v5.23.3.tar.gz
Last updated2026-06-30T21:40:27Z
Pulseupdated
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namerailway
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

railway

nix profile install nixpkgs#railway
  • normalized package name match
  • Matched by: Railway
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ra/railway/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

railway 2.9.4-r0

Railway lets you look up travel information for many different railways

https://gitlab.com/schmiddi-on-mobile/railway

sudo apk add railway
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: railway
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Railway
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: railway from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

railway-lang 2.9.4-r0

Languages for package railway

https://gitlab.com/schmiddi-on-mobile/railway

sudo apk add railway-lang
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: railway
  • normalized package name match
  • Matched by: Railway
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: railway-lang from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

railway 2.10.1-1

Look up travel information for many different railways

https://apps.gnome.org/DieBahn/

sudo pacman -S railway
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • 9 dependencies
  • normalized package name match
  • Matched by: Railway
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: railway from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop95%

main/railway

scoop install main/railway
  • normalized package name match
  • Matched by: Railway
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/railway.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • rustBuild dependency declared by Homebrew.

Same workflow

  • vercel-cliShares av.db curated category or tags: cli, cloud, cloud-infrastructure, deployment, hosting.
  • aws-elasticbeanstalkShares av.db curated category or tags: cli, cloud-infrastructure, deployment, paas.
  • sailShares av.db curated category or tags: cli, cloud-infrastructure, deployment, hosting.
  • scalingoShares av.db curated category or tags: cli, cloud, cloud-infrastructure, deployment, hosting.
  • webpodShares av.db curated category or tags: cli, cloud-infrastructure, deployment, hosting.
  • bosh-cliShares av.db curated category or tags: cli, cloud-infrastructure, deployment.
  • railwaySame normalized package name in another local ecosystem.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest