Railway

the platform reads the members of your Railway workspaces through the Railway GraphQL API so you can review who has access.

attention to

Use an account token, created at Account Settings > Tokens with the workspace selector left on No workspace. A workspace or project token will not work, because the platform’s query is scoped to your personal account (me), which Railway does not expose to workspace or project tokens.

Prerequisites

• the platform organization administrator access
• A Railway account token from an account that belongs to every workspace you want to review (the review only covers workspaces the token’s account is a member of)

Collected Fields

the platform field	Railway field	Notes
Name	name	Falls back to the email
Email	email
Role	role	ADMIN → Admin, MEMBER → Member; other roles are shown as-is, and roles are combined across the account’s workspaces
Admin	role	Flagged as an administrator when any workspace lists the member’s role as ADMIN
Status	Not supported
MFA	twoFactorAuthEnabled	Whether two-factor authentication is enabled for the member
Last login	Not supported
External ID	id	Stable identifier used to track the account across reviews
Created at	Not supported

Step 1: Create an Account Token

1. In Railway, go to Account Settings > Tokens.
2. Name it (e.g. Probo Access Review), leave the workspace selector on No workspace so the token is tied to your account, and create it.
3. Copy the token and store it securely. It’s shown only once.

Step 2: Connect in the platform

1. In the platform, go to Access Reviews > Sources > Add Source.
2. Find Railway, click API Key, paste the token, and click Connect.

the platform names the source after your Railway workspace, or after your account when the token’s account belongs to several workspaces, and pulls their members into your campaigns.

Troubleshooting

• Token rejected. Confirm it’s an account token, created with No workspace selected. A workspace or project token won’t work, because the platform’s query resolves your personal account.
• No members appear. The token’s account must belong to the workspace you’re reviewing; members of workspaces the account is not in are not visible.