{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-TOOL-TRUST-RAILWAY-01-v1",
  "record_kind": "external_reference",
  "title": "Railway MCP: User identity and confirmation hints",
  "system": "Railway MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can a Railway project token restrict an MCP agent to one project?",
  "near_questions": [
    "Can a project token authenticate Railway MCP?",
    "Does a local CLI bridge still call a hosted service?",
    "Which login identity does Railway MCP reuse?",
    "Can OAuth narrow the projects visible to an agent?",
    "Do destructive hints guarantee a confirmation prompt?",
    "How does the local Railway tool set differ?",
    "Can a debugging tool delegate multiple operations?",
    "Does accepting staged changes also deploy them?",
    "What evidence should I retain about a Railway grant?",
    "Can an agent change project feature flags?",
    "Can I save the documented confirmation boundary?",
    "When should a hosting-client approval policy be retested?"
  ],
  "supported_claims": [
    {
      "claim": "The current documentation says project tokens are not accepted: MCP requires a user identity. OAuth can select workspaces and projects, while the default CLI bridge reuses the login session. Destructive-action hints depend on client support, so verify both the grant and confirmation behaviour.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The current documentation says project tokens are not accepted: MCP requires a user identity. OAuth can select workspaces and projects, while the default CLI bridge reuses the login session. Destructive-action hints depend on client support, so verify both the grant and confirmation behaviour.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-RENDER-01-v1",
    "VXI-EXT-TOOL-TRUST-FIREBASE-01-v1",
    "VXI-EXT-TOOL-TRUST-CLOUDINARY-01-v1",
    "VXI-EXT-TOOL-TRUST-PAYPAL-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Railway hosted and local MCP identity and deployment tools",
    "source_url": "https://docs.railway.com/ai/mcp-server",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-RAILWAY-01-v1",
    "candidate_record_sha256": "dccaca52dc4eacdf738ab7d9fc44ddec4e65dadd5a837c18d7092df1587e68bd",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The current documentation says project tokens are not accepted: MCP requires a user identity. OAuth can select workspaces and projects, while the default CLI bridge reuses the login session. Destructive-action hints depend on client support, so verify both the grant and confirmation behaviour.",
    "required_buyer_context": "Identify hosted or local mode, user login, OAuth selections, target project and client confirmation policy.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Railway MCP",
      "variant": "Hosted server, CLI bridge and local alternative"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Railway operates the hosted server and publishes its CLI integration.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Manage projects, deployments and supported operational actions.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Reads project, service and feature-flag information.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Can create projects, redeploy, change flags and delegate multistep operations.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "User OAuth or CLI login; project tokens are not accepted.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "OAuth resource selections and the acting user determine access; local tools differ.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Operational context is returned to the assistant and may be handled by Railway delegated tools.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "A client may not enforce protocol confirmation hints as expected.",
        "source_ids": [
          "railway"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer grant and actual client confirmation behaviour are unknown.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Require scoped identity evidence and authorised deployment intent.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "railway",
        "url": "https://docs.railway.com/ai/mcp-server",
        "final_url": "https://docs.railway.com/ai/mcp-server",
        "title": "Railway hosted and local MCP identity and deployment tools",
        "checked_on": "2026-10-14",
        "sha256": "ded5683f7c0c6bb7597c9f4c1cfb6cc888bd31a02b32bfd1b3fd02490d6c8828",
        "bytes": 269077
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Preserve the identity and confirmation assumptions behind a hosting-agent approval.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck OAuth selections, CLI variant and confirmation support."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#railway-mcp-user-scope-confirmation-trust",
  "machine_readable_record": "/varexis-index/records/railway-mcp-user-scope-confirmation-trust.json"
}