# Netlify API + MCP vs Railway MCP Server (slim)

> Netlify scores 69.4 (B) to Railway's 53.2 (D) for cloud hosting. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/netlify-vs-railway-mcp-server.md (~5,400 tokens) · this version ~3,730 tokens · JSON https://www.anchorterminal.com/compare/netlify-vs-railway-mcp-server.json · canonical https://www.anchorterminal.com/compare/netlify-vs-railway-mcp-server
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Netlify API + MCP scores 69.4 (B) on agent readiness against Railway MCP Server's 53.2 (D), and leads in 6 of 7 scored categories. Railway MCP Server leads on security & auth. Both do cloud hosting.

- Netlify API + MCP: B 69.4, rank #226 of 1349 · https://www.anchorterminal.com/tools/netlify.min.md
- Railway MCP Server: D 53.2, rank #852 of 1349 · https://www.anchorterminal.com/tools/railway-mcp-server.min.md
- Netlify API + MCP, good for An agent that builds and deploys web projects, sets environment variables and reads forms or logs on a team's Netlify account, including with no account through anonymous deploys. Ahead on Reliability, 67 against 57; Schema & documentation, 79 against 56; Agent ergonomics, 69 against 59; Payments & pricing, 55 against 40; Transparency & trust, 81 against 74. Also No incidents deducted, where Railway MCP Server loses 7 points for them.
- Railway MCP Server, good for Agents that deploy and operate applications on Railway from an editor and are content to hand multi-step work to Railway's own agent. Ahead on Security & auth, 65 against 59.

| Category | Netlify API + MCP | Railway MCP Server |
| --- | --- | --- |
| Reliability (16%) | 67 | 57 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 79 | 56 |
| Agent ergonomics (13%) | 69 | 59 |
| Security & auth (14%) | 59 | 65 |
| Payments & pricing (10%) | 55 | 40 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 87 | 83 |
| Transparency & trust (7%) | 81 | 74 |

| Fact (where they differ) | Netlify API + MCP | Railway MCP Server |
| --- | --- | --- |
| Kind | HTTP API | MCP server |
| Vendor | Netlify, Inc. | Railway Corporation |
| Hosted endpoint | `https://api.netlify.com/api/v1` | `https://mcp.railway.com` |
| Transports | HTTP, Streamable HTTP, stdio | Streamable HTTP, stdio |
| Auth | OAuth or key | OAuth |
| Pricing | Freemium | Your plan |
| Licence | ISC for the MCP server (@netlify/mcp) and MIT for the CLI (netlify-cli). The Netlify platform they act on is a proprietary service under Netlify's terms | Proprietary hosted server under Railway's Terms of Service. The Railway CLI, which carries the stdio proxy and a separate local MCP server, is MIT |
| MCP registry | not listed | `com.railway/mcp` |
| Last release | 2026-10-26 | 2026-10-19 |
| Terms last updated | 2026-10-14 | couldn't be read |
| Privacy policy last updated | 2026-04-10 | couldn't be read |
| Customer content may train models | not found in the text | couldn't be read |
| Terms restrict automated access | not found in the text | couldn't be read |
| Terms restrict benchmarking | not found in the text | couldn't be read |
| Terms or service can change without notice | not found in the text | couldn't be read |
| Arbitration or class-action waiver | not found in the text | couldn't be read |
| Popularity | 58k npm/wk | 426k npm/wk |

Why the edge:
- Schema & documentation, Netlify API + MCP +23: Netlify API + MCP 79 (A public Swagger 2.0 spec, version 2.63.1, with 124 paths and 188 operations, and MCP tools typed through zod (25). llms.txt and a Markdown twin of every docs page, with agent skills in netlify/context-and-tools (10). Every spec operation has a summary, most one line, and the MCP tool descriptions say what to call first, as the deploy tool does for get-projects, but not when to leave an endpoint alone (14 of 20). 232 parameters with 9 enums; the MCP selector tools take an `operation` literal and a `params` object per operation inside one union, which is typed but nested (9 of 15). The API guide gives curl examples for sites and deploys, a shared `error` object of code and message is the default response, and 422, 404, 409 and 423 are declared on some operations, but the docs' error reference covers builds and domains rather than API codes (8 of 15). The spec carries a version, the API a /v1 path, Netlify a dated changelog, and the MCP server a dated CHANGELOG from release-please (13 of 15). 25 + 10 + 14 + 9 + 8 + 13 = 79.); Railway MCP Server 56 (The hosted server's source is closed and `tools/list` needs a signed-in client, so no tool schema was read. A server card and a registry entry are public, and the CLI proxy source shows that tools declare their parameters (15 of 25). llms.txt on both sites and a Markdown twin of every docs page (10). The docs name the 11 tools and describe four of them in a line each. The descriptions the server sends were not read (8 of 20). Input types, enums and bounds could not be read (5 of 15). The docs give example prompts and the 401 challenge, and the API docs list error codes. No list of tool errors was found (9 of 15). Railway's changelog is weekly and dated, but the growth from seven tools to 11 has no dated entry found, and the hosted server shows a fixed version 1.0.0 (9 of 15).)
- Payments & pricing, Netlify API + MCP +15: Netlify API + MCP 55 (No x402, MPP or L402 (0). Plan prices and per-unit credit prices (deploys, bandwidth, compute, requests, credit packs) are public without a login (20). A Free plan with 300 credits a month and API deploys, and the docs do not say a card is needed (20). `netlify deploy --allow-anonymous` publishes a project and URL with no account, claimable within an hour, but the API, the MCP server and anything past that hour need a person to sign up and approve a token (15 of 20). 0 + 20 + 20 + 15 = 55.); Railway MCP Server 40 (No x402, MPP or L402 on the server (0). Railway can be provisioned through Stripe's Agentic Provisioning Protocol, which is a separate route and earns nothing here. Plan fees and per-second prices for CPU, memory, volumes and egress are public (20). The trial gives $5 of credit for 30 days with no card, followed by a Free plan with $1 a month (20). Dynamic client registration needs no setup, but a person has to sign in and approve the grant in a browser or with a device code (0).)
- Reliability, Netlify API + MCP +10: Netlify API + MCP 67 (Read with the hosted lines. Statuspage at netlifystatus.com with component history and an Atom feed (20). From 5 August to 3 November 2026 the feed lists 19 incidents and no maintenance. None names the API or the MCP server. Errors reaching hosted sites and the Netlify application for about 85 minutes on 21 September read as one major outage; errors on the edge network for 55 minutes on 5 October, CDN DNS errors for 34 minutes on 24 September, 6 minutes of 500s on 18 August, and build, Agent Runner, AI Gateway and log-delay incidents read as minor (10 of 30). Limits are published with numbers, about 500 requests a minute, 3 deploys a minute and 100 a day, with X-RateLimit headers (15). The docs say retrying a timed-out upload is safe and give the reset header, but no backoff guidance, no idempotency key for deploys or site creation, and 429 appears in the spec only on agent runner endpoints (7 of 15). A 99.99 per cent SLA is named for Enterprise on the pricing page, with its terms in order forms (5 of 10). The API is generally available (10). 20 + 10 + 15 + 7 + 5 + 10 = 67.); Railway MCP Server 57 (Scored as a hosted server. Railway's terms bar crawling or scraping any page of its websites by manual or automated means, so no railway.com page was re-read on 4 November and the status lines are per the 9 October check. status.railway.com is an in-house status page with component history by region and for the API and OAuth login (20). On 9 October it listed about 25 incidents from 11 July to 8 October 2026, most on slow builds and deployments, including a five-minute routing failure for all domains on 30 September, services and databases unavailable for some users in US West on 3 October and a hardware fault in US West on 29 August. The MCP server is not a component. The readable part of today's window (6 August to 8 October) holds one major, the all-domain routing failure, and 9 October to 4 November was not read (10 of 30). No limit is stated for the MCP server. The public API's limits are published with numbers, 100 to 10,000 requests an hour by plan (8 of 15, held partial). The API docs give `Retry-After` on 429, backoff advice and retry rules for mutations, with no idempotency key, which this run reads as safe-retry guidance without keys (12 of 15, was 10). A 99.99% SLA is named for Enterprise with terms by contract, and no SLA document was found or read (0 of 10, was 5). The docs carried no beta label, but the April 2026 launch note called it ready for public testing (7 of 10, held partial). 20 + 10 + 8 + 12 + 0 + 7 = 57.)
- Agent ergonomics, Netlify API + MCP +10: Netlify API + MCP 69 (Lists are sized with `per_page` up to 100 and there is no field selection. The hosted MCP server registers about 11 tools by default, a reader and an updater selector per domain plus coding context and design import, and lists all 25 operations one by one only for OpenAI clients, so the context cost is low either way (18 of 25). `page` and `per_page` with a `Link` header, few filters, and MCP pagination bounds enforced since v1.19.0 (15 of 20). Errors return a code and message; the MCP server answers a bad selector with text telling the agent to pick an operation again (12 of 20). No idempotency key for deploys or sites, though timed-out uploads are safe to retry; every MCP tool declares readOnly, destructive, idempotent and openWorld hints since v1.18.0, with project renames marked destructive (12 of 20). Few required parameters, a Go client, a JS client and the CLI (12 of 15). 18 + 15 + 12 + 12 + 12 = 69.); Railway MCP Server 59 (Eleven tools, one over the ten that earns full marks, with `railway-agent` taking multi-step work in a single call (20 of 25). The three list tools are the only read tools apart from the flag tools. Pagination and size controls could not be read (6 of 20). A missing or expired token answers 401 with a `WWW-Authenticate` challenge, the CLI proxy returns a login hint, and API errors carry a code and a trace id (12 of 20). The docs say destructive tools are marked at the protocol level so clients prompt. Read-only hints were not established, and there is no idempotency key (12 of 20). The CLI proxy fills project context from the linked directory for tools that accept it. Two official SDKs for the platform API were not found (9 of 15).)
- Transparency & trust, Netlify API + MCP +7: Netlify API + MCP 81 (The MCP server is ISC and the CLI MIT, on a closed platform with clear terms naming Netlify, Inc. (25 of 30). A downloadable DPA and subprocessor list, but no retention periods in the privacy statement, which also says content trains AI models only with an opt-in in one section and never in another (18 of 30). Dated deprecation notices in the changelog (Netlify Identity 28 February 2025, Node 18 and 20 build plugins 21 May 2026), no written policy, and the enterprise agreement lets beta services end at any time (12 of 20). Subprocessors named with countries, all US, with CSV, PDF and RSS, and Data Privacy Framework participation (18 of 20). 25 + 18 + 12 + 18 = 73.); Railway MCP Server 74 (The hosted server is closed source under clear terms. The CLI proxy and the local server are MIT (20 of 30). The DPA is published in full. The privacy policy's full text was not read. Audit log and image retention are stated by plan, and nothing was found on what the hosted server or `railway-agent` keeps from a session (18 of 30). The old npm server was deprecated on 23 May 2026 with a shim and a registry notice, and API fields are marked `@deprecated` before removal with no stated period. The terms let Railway suspend or discontinue any part of the Services (10 of 20). The DPA names Google Cloud Platform and the United States, promises ten days' notice of a new sub-processor and points to a list at trust.railway.com that was not read (13 of 20). Per the 9 October check, not re-read on 4 November (Railway's terms bar scraping its pages). The CLI's telemetry is on by default and documented with an opt-out (`railway telemetry disable`, `DO_NOT_TRACK` or `RAILWAY_NO_TELEMETRY`); the source sends events with the account token, the linked project, environment and service IDs and a caller name read from the process tree. That is scored on the local-software reading, not on this hosted line.)
- Security & auth, Railway MCP Server +6: Netlify API + MCP 59 (Personal access tokens get a name and an expiry date at creation and can be deleted, but no scopes are documented and the spec's OAuth2 implicit flow declares none, so a token reaches every team its owner belongs to. The hosted MCP uses OAuth 2.1 with PKCE and dynamic registration and advertises read and write scopes, which the source sanitises at registration and does not check on tool calls, while the upstream Netlify token it holds is unscoped. Secrets travel in headers; v1.21.0 keeps the upstream token out of URLs (18 of 30). Read-only tools are grouped apart from writes and writes are marked destructive, but there is no read-only token and no confirmation step (10 of 20). Form submissions and request logs written by site visitors reach the model through the tools, with no injection guidance (2 of 15). Team audit log on Pro and Enterprise, a site audit log, and the MCP server logs client, agent and model names per call (12 of 15). Public HackerOne bounty, SOC 2 Type II, ISO 27001 and 27018, PCI DSS and HIPAA on the trust centre, a disclosure policy post, and no security.txt (17 of 20). 18 + 10 + 2 + 12 + 17 = 59.); Railway MCP Server 65 (OAuth with PKCE required, dynamic client registration, grants limited to the workspaces and projects a person picks, one-hour access tokens and rotating refresh tokens. Revocation is in the dashboard only, and the MCP resource lists a single scope, `workspace:member` (25 of 30). There is no read-only grant for the hosted server. Destructive tools carry hints that prompt in clients that respect them, and project tokens are refused (10 of 20). `railway-agent` reads logs and configuration, which are untrusted content. The docs tell users to review actions and keep to non-critical environments, with no prompt-injection guidance found (4 of 15). Workspace audit logs record the actor and can be exported through the API, kept 48 hours on Free and Hobby, 30 days on Pro and 18 months on Enterprise. No marker for MCP calls was found (11 of 15). SOC 2 Type II and SOC 3, a HIPAA BAA, a Bugcrowd bounty that is invite-only and public incident reports. No security.txt (15 of 20).)