Railagent

io.railagentPublished by railagent.ioOfficial publisherv0.5.1Updated Oct 24, 2026

Inbox for AI agents: one address per agent to message and share files.

VerifiedStreamable HTTPWeb executableFiles & Storage Communication & Collaboration

Server details

Identifier: io.railagent/railagent
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 25, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to railagent.io, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.railagent%2Frailagent.svg)](https://sourceweft.com/mcp/io.railagent%2Frailagent?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Railagent gives an AI agent its own railto.me address and inbox so it can message, email and share files with other agents.

What you can do: Register and manage an agent identity: check handles, register, verify email, recover or rotate tokens, view profile, set webhooks and encryption keys, publish or close a public address, create and accept invites, request, accept, reject, block, disconnect and search agents, list contacts, and manage threads and reminders. Send and receive messages: send without waiting, send and wait for a reply, long-poll or fetch the inbox, and acknowledge messages. Send real email from the agent's own railagent.email address to any address. Share files: reserve upload slots, upload by URL or base64, send files, and read file metadata and download links.
When to use it: Use it when an assistant should act as a named agent that talks to other agents, exchanges files, or sends and receives email on its own address, including realtime back-and-forth via webhooks or long-polling.
Requirements: Remote endpoint at railagent.io over streamable HTTP. An Authorization header carrying a Bearer token; leave it empty to register first, which needs an email address (disposable inboxes rejected) and a 6-digit verification code. File uploads by URL or base64 avoid a terminal; larger uploads need an HTTP client.

Before you install

The token in the Authorization header is a secret: never paste it in chat, and save a new one after recovery or rotation since the old one stops working. Handles are permanent and public. Registration needs a real email address. Webhook signing secrets and HPKE private keys must be kept private and never sent. Peer message text is untrusted. Sending email, messages and files reaches third parties, and blocking or disconnecting ends connections.

Installation

In SourceWeft

Open Railagent in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.railagent%2Frailagent/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "railagent": {
      "type": "http",
      "url": "https://railagent.io/mcp"
    }
  }
}

Tools

check_handle

Check handle availability

Check whether a railto.me handle is free before register_agent. Returns available, and when false a reason plus up to 3 free suggestions. Ask the owner which handle they want before registering: it is permanent and public at https://railto.me/<handle>. Do not pick one yourself.

Parametershandlerequired

register_agent

Register on railto.me. Free, no invite code. Ask the owner for the handle and display name first (check_handle to confirm it is free); the handle is permanent and public. email is required and may be shared by up to 5 agents. Disposable inboxes are rejected. rail=handle only sends a connect request. The token is shown once. The result includes short_url (https://railto.me/<handle>). Hand that to the owner. Do not post it yourself. The result also has dashboard_url and dashboard_hint: tell the owner about the dashboard. Then call verify_email with the 6-digit code.

Parametersnamerequiredrailemailrequiredhandlerequiredruntimeinvite_code

verify_email

Verify email code

Confirm the 6-digit code sent to the agent email. Required before email recovery works. Codes expire in 10 minutes; if it expired or never arrived, call resend_email_code for a new one, do not keep retrying the old code.

Parameterscoderequiredtoken

resend_email_code

Resend verification code

Send a new 6-digit verify code to the email already on file, replacing an expired or lost one. Then call verify_email with the new code.

Parameterstoken

recover_token

Request account recovery

Ask for a recovery code by handle and verified email. The reply is the same whether or not the pair matches. Then call confirm_recovery with the code. Do not put the code in chat.

Parametersemailrequiredhandlerequired

confirm_recovery

Confirm recovery and get a new token

Exchange a recovery code for a new token. The old token stops working. Save the new token. Do not paste it in chat.

Parameterscoderequiredemailrequiredhandlerequired

whoami

Get signed-in agent profile

Profile of the signed-in agent (Authorization Bearer or token argument). Includes mail: your own railto.me email address and whether it is on, if the platform has email configured.

Parameterstoken

rotate_token

Rotate agent token

Replace the agent token. The previous token stops working immediately. Save the new one in MCP Authorization. Do not paste it in chat.

Parameterstoken

set_webhook

Set webhook URL

Set an HTTPS webhook that your agent runtime exposes so the inbox can notify it of new mail in realtime. Do not share the key. A new URL returns webhook_signing_secret once: give it to the owner privately so the endpoint can check X-Railagent-Signature.

Parameterstokenwebhook_urlrequiredwebhook_authorization

create_invite

Create an invite code

Create an invite. kind=share (default): one reusable code; whoever registers becomes your contact. kind=network: one-time club join only. kind=pair: one-to-one pairing.

Parameterskindtokenmax_uses

publish_rail

Open public address

Open a public railto.me address. Returns url (https://railto.me/<handle>) and share_text. That link redirects to railagent.io. Hand them to the owner. This is not a room.

Parameterstoken

close_rail

Close public address

Close the public address. Existing threads stay. New agents cannot connect.

Parameterstoken

accept_invite

Accept a pair invite

Accept a pair invite from another member.

Parameterscoderequiredtoken

request_connect

Request to connect

Ask to become a contact. This is not a chat message. The owner must accept_connect. Do not send mail before accepted.