Cursor Talk to Figma

Overview

From the repository's own README, as read at the audited commit.

# Talk to Figma MCPThis project implements a Model Context Protocol (MCP) integration between AI agent (Cursor, Claude Code) and Figma, allowing AI agent to communicate with Figma for reading designs and modifying them programmatically.https://github.com/user-attachments/assets/129a14d2-ed73-470f-9a4c-2240b2a4885c## Project Structure- `src/talk_to_figma_mcp/` - TypeScript MCP server for Figma integration- `src/cursor_mcp_plugin/` - Figma plugin for communicating with Cursor- `src/socket.ts` - WebSocket server that facilitates communication between the MCP server and Figma plugin## How to use1. Install Bun if you haven't already:```bashcurl -fsSL https://bun.sh/install | bash```2. Run setup, this will also install MCP in your Cursor's active project```bashbun setup```3. Start the Websocket server```bashbun socket```4. **NEW** Install Figma plugin from [Figma community page](https://www.figma.com/community/plugin/1485687494525374295/cursor-talk-to-figma-mcp-plugin) or [install locally](#figma-plugin)## Quick Video Tutorial[Video Link](https://www.linkedin.com/posts/sonnylazuardi_just-wanted-to-share-my-latest-experiment-activity-7307821553654657024-yrh8)## Design Automation Example**Bulk text content replacement**Thanks to [@dusskapark](https://github.com/dusskapark) for contributing the bulk text replacement feature. Here is the [demo video](https://www.youtube.com/watch?v=j05gGT3xfCs).**Instance Override Propagation**Another contribution from [@dusskapark](https://github.com/dusskapark)Propagate component instance overrides from a source instance to multiple target instances with a single command. This feature dramatically reduces repetitive design work when working with component instances that need similar customizations. Check out our [demo video](https://youtu.be/uvuT8LByroI).## Manual Setup and Installation### MCP Server: Integration with CursorAdd the server to your Cursor MCP configuration in `~/.cursor/mcp.json`:```json{  "mcpServers": {    "TalkToFigma": { 

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add talk-to-figma-mcp -- npx -y [email protected]

{
  "mcpServers": {
    "talk-to-figma-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (44) 16 read · 26 write · 2 destructive

Blast radius: 2 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

grab/cursor-talk-to-figma-mcp

npm

talk-to-figma-mcp@1.0.0

Transports

stdio

License

MIT

Stars

7,009 · pushed 49d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

declared (1 observation(s))

Network

declared (5 observation(s))

Shell

none-observed

Dependencies

not all pinned

Secrets in source

none-found

Findings (7)

delete_multiple_nodes, delete_node

uuid, ws, @types/bun, bun-types, tsup, typescript

uuid, ws, @types/node, @types/uuid, @types/ws, ts-node, typescript

curl -fsSL https://bun.sh/install | bash

curl -fsSL https://bun.sh/install | bash

[ "$SUDO_AVAILABLE" = "YES" ] && cd ~/Desktop && git clone https://github.com/sonnylazuardi/cursor-talk-to-figma-mcp.git && cd cursor-talk-to-figma-mcp && curl -fsSL https://bun.sh/install | bash && s

curl -fsSL https://bun.sh/install | bash

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 3b14afdfa9c1 · full audit: observations/trust-audit/mcp-server/grab__cursor-talk-to-figma-4.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions