Railway Engine
Railway Engine

Authentication

Every endpoint is a plain HTTP GET authenticated with a single header. There is no OAuth flow, no request signing — just x-api-key.

Request

Base URL: https://railway-engine.apkscope.workers.dev
Header: x-api-key: YOUR_KEY
Optional: accept: application/json
Free key from the dashboard after Google sign-in

Key safety

Keep the key in a server-side environment variable
Never hard-code, log or commit a key
Route browser traffic through your own backend
Rotate the key from the dashboard if it leaks

Failures

401 when the header is missing or the key is invalid
429 RATE_LIMITED above 60 requests per minute
Check HTTP status, then the envelope status
bash
curl -H "x-api-key: YOUR_KEY" "https://railway-engine.apkscope.workers.dev/v1/train/12919/status"