Credential access
Reads Railway tokens, project links, and environment variable data.
agent safety
Agent safety answer
railway manages Railway projects, services, variables, and deployments.
Remote mutation
Can deploy, change variables, and mutate hosted services.
Publish/artifact risk
Publishes application builds and deployment state.
Recommended control
Gate deploy, variable, service, and token commands.
Agent-use guidance
Allow status reads; require approval for deploys, variable changes, and service mutations.
安装
使用 Automic Vault 安装
Automic Vault
sudo av install brew:railwaymacOS
Homebrewverified · 100%
brew install railwaylocal Homebrew formula metadata
Linux
Alpine Linux apkverified · 92%
sudo apk add railwayAlpine Linux edge package indexes · railway · source: dl-cdn.alpinelinux.org
Nixverified · 92%
nix profile install nixpkgs#railwaynixpkgs package indexes · pkgs/by-name/ra/railway/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S railwayArch Linux sync databases · railway · source: geo.mirror.pkgbuild.com
Windows
Scoopverified · 92%
scoop install main/railwayScoop official bucket manifest trees · bucket/railway.json · source: api.github.com
软件包管理器来源
平台说明
- 没有特定于此软件包的平台说明。
概览
软件包摘要
Develop and deploy code with zero configuration
主页
命令和别名
- railway
受保护工具覆盖
Plain Text Railway CLI Tokens
Railway CLI stores login state in JSON config files under ~/.railway, including legacy tokens and OAuth access/refresh tokens. Our isotope stores the Railway configs in the macOS keychain and injects them through a temporary HOME while `railway` runs.
Risk classifier
green risk · low confidence · appliance
Why
- no executable entrypoint in the package index
Signals
- metadata:no-indexed-executables
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
本地 README 摘录
Railway Protected-tool coverage
Railway CLI stores login state in JSON config files under ~/.railway, including legacy token values and OAuth accessToken / refreshToken values. The protected-tool coverage moves those configs into the macOS keychain and runs railway with a temporary home directory containing the injected configs.
Caveats
- The production, staging, and development config files are migrated:
config.json, config-staging.json, and config-dev.json.
- Login, logout, token refresh, and project link changes happen in temporary
runtime state and are not persisted back to the keychain.
- Direct execution of the original binary will not receive credentials.
来源: local coverage notes
覆盖来源
来源摘录
Caveats
- Runtime login/logout/token refresh changes are not persisted back to keychain.
- Direct execution of the original binary will not receive credentials.
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
railway | cli | global executable |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-06-10
管理器版本5.8.0
管理器更新时间2026-06-10
本地数据ok
上游current
检测到的最新版本v5.8.0
https://github.com/railwayapp/cli
- okNo freshness warnings were generated.
安装元数据
软件包元数据
| Package key | brew:railway |
|---|---|
| Version | 5.8.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/railway |
| Homepage | https://railway.com/ |
| Repository | https://github.com/railwayapp/cli |
| Upstream docs | https://docs.railway.com/cli |
| License | MIT |
| Source archive | https://github.com/railwayapp/cli/archive/refs/tags/v5.8.0.tar.gz |
| Last updated | 2026-06-10T01:13:55Z |
| Pulse | updated |
| Build dependencies | rust |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | railway |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
railway
nix profile install nixpkgs#railway- normalized package name match
- Matched by: Railway
apk95%
railway 2.9.4-r0
Railway lets you look up travel information for many different railways
https://gitlab.com/schmiddi-on-mobile/railway
sudo apk add railway- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: railway
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Railway
apk95%
railway-lang 2.9.4-r0
Languages for package railway
https://gitlab.com/schmiddi-on-mobile/railway
sudo apk add railway-lang- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: railway
- normalized package name match
- Matched by: Railway
pacman95%
railway 2.10.1-1
Look up travel information for many different railways
https://apps.gnome.org/DieBahn/
sudo pacman -S railway- License: GPL-3.0-or-later
- Architecture: x86_64
- 9 dependencies
- normalized package name match
- Matched by: Railway
Scoop95%
main/railway
scoop install main/railway- normalized package name match
- Matched by: Railway
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- local coverage README
- package relationship graph
- package version freshness
- package-page enrichment
- secret-handling manifest