Figma Context

Overview

From the repository's own README, as read at the audited commit.

<a href="https://www.framelink.ai/?utm_source=github&utm_medium=referral&utm_campaign=readme" target="_blank" rel="noopener">  <picture>    <source media="(prefers-color-scheme: dark)" srcset="https://www.framelink.ai/github/HeaderDark.png" />    <img alt="Framelink" src="https://www.framelink.ai/github/HeaderLight.png" />  </picture></a><div align="center">  <h1>Framelink MCP for Figma</h1>  <h3>Give your coding agent access to your Figma data.<br/>Implement designs in any framework in one-shot.</h3>  <a href="https://npmcharts.com/compare/figma-developer-mcp?interval=30">    <img alt="weekly downloads" src="https://img.shields.io/npm/dm/figma-developer-mcp.svg">  </a>  <a href="https://github.com/GLips/Figma-Context-MCP/blob/main/LICENSE">    <img alt="MIT License" src="https://img.shields.io/github/license/GLips/Figma-Context-MCP" />  </a>  <a href="https://framelink.ai/discord">    <img alt="Discord" src="https://img.shields.io/discord/1352337336913887343?color=7389D8&label&logo=discord&logoColor=ffffff" />  </a>  <br />  <a href="https://twitter.com/glipsman">    <img alt="Twitter" src="https://img.shields.io/twitter/url?url=https%3A%2F%2Fx.com%2Fglipsman&label=%40glipsman" />  </a></div><br/>Give [Cursor](https://cursor.sh/) and other AI-powered coding tools access to your Figma files with this [Model Context Protocol](https://modelcontextprotocol.io/introduction) server.When Cursor has access to Figma design data, it's **way** better at one-shotting designs accurately than alternative approaches like pasting screenshots.<h3><a href="https://www.framelink.ai/docs/quickstart?utm_source=github&utm_medium=referral&utm_campaign=readme">See quickstart instructions →</a></h3>## Demo[Watch a demo of building a UI in Cursor with Figma design data](https://youtu.be/6G9yb-LrEqg)[![Watch the video](https://img.youtube.com/vi/6G9yb-LrEqg/maxresdefault.jpg)](https://youtu.be/6G9yb-LrEqg)## How it works1. Open your IDE's chat (e.g. agent mode in Cursor).2. Paste a link to a

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add figma-developer-mcp --env FIGMA_API_KEY=${FIGMA_API_KEY} -- npx -y [email protected] --stdio

Exposed tools (2) 2 read · 0 write · 0 destructive

Details

Source

glips/figma-context-mcp

npm

figma-developer-mcp@0.13.2

Transports

stdio · streamable-http

Credentials it reads

FIGMA_API_KEYFIGMA_FILE_KEY

License

MIT

Stars

15,841 · pushed 3d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

declared (4 observation(s))

Network

none-observed

Shell

declared (1 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (16)

.release-please-manifest.json

const parsed = yaml.load(content);

const parsed = yaml.load(output);

const fullHash = createHash("sha1").update(key).digest("hex");

const fullHash = createHash("sha1").update(str).digest("hex");

import { downloadFigmaImages as runDownloadFigmaImages } from "../../services/download-figma-images.js";

import type { FigmaService } from "../../services/figma.js";

import { type ResolveLocalPathFailureReason, resolveLocalPath } from "../../utils/local-path.js";

import { Logger } from "../../utils/logger.js";

{ ...validParams, localPath: "../../etc" },

StreamableHTTP endpoint available at http://127.0.0.1:3333/mcp

StreamableHTTP endpoint available at http://127.0.0.1:3333/sse (backward compat)

const transport = new StreamableHTTPClientTransport(new URL(`http://127.0.0.1:${port}/mcp`), {

const transport = new StreamableHTTPClientTransport(new URL(`http://127.0.0.1:${port}/mcp`));

const transport = new StreamableHTTPClientTransport(new URL(`http://127.0.0.1:${port}/sse`));

@figma/rest-api-spec, @jimp/core, @jimp/js-gif, @jimp/js-jpeg, @jimp/js-png, @jimp/plugin-crop, cleye, cross-env

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 88c7b3849ad9 · full audit: observations/trust-audit/mcp-server/glips__figma-context.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions