Connect Railway
Averil reads your Railway projects, members and variable names, so a provider incident maps to your keys in minutes.
What Averil uses it for
- Listing projects, services, environments and members.
- Showing where secrets live, by variable name.
- Checking that the workspace enforces two-factor and finding public projects.
- Finding project members who have left the company.
Read access
Each read is a fixed GraphQL query. The broker checks the query against a pinned hash, so no other query can be sent. The rate limit is 15 calls a minute.
| Operation | Why |
|---|---|
| Projects | Projects with their services, environments and members |
| Variable names | Variable names per environment and service. The query selects names only, never values. |
| Workspace | Whether the workspace enforces two-factor authentication |
Write access
None. The Railway integration is read-only.
How to connect
- 1In your Railway workspace settings, create a workspace token for Averil.
- 2Share it with us the way we agree during onboarding. Never paste a token into Slack or email.
- 3The broker stores the token and sends it only to Railway's API.
What limits the tokenThe token itself is a Railway workspace token. What keeps Averil read-only is the broker: it sends only the three queries above, and it logs every call to your action log.
How to revoke
Delete the token in your Railway workspace settings. Averil marks the integration as access revoked and keeps working from the last snapshot, with checks marked as pending access.
What's next
Vercel (projects and environment variables) is coming soon.
Stuck? Email averil@averil.ai or ask me in Slack.