ModelsAtlas
Explore
Atlas / MCP servers / jayzeedesign / Figma

FigmaCAUTION

mcp/jayzeedesign/figma-4
MCP server by jayzeedesign · Audited 2026-10-07
⚑ Report / re-scanSource ↗
Verdict
CAUTION
Grade
B
Trust score
83 /100
Exposed tools
3 3r · 0w · 0d
Transport
—
License
MIT
Stars
67
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://badge.fury.io/py/figma-mcp)

Allow your AI coding agents to access Figma files & prototypes directly. You can DM me for any issues / improvements: https://x.com/jasonzhou1993

Quick Installation with pipx

pipx install figma-mcp

For Cursor:

  1. In settings, add an MCP server using the command:
figma-mcp --figma-api-key=your_figma_key
  1. OR Add a .cursor/mcp.json file in your project:
{
"mcpServers": {
"figma-python": {
"command": "figma-mcp",
"args": [
"--figma-api-key=your_figma_key"
]
} 
}
}

For other IDEs like Windsurf, use an MCP configuration file (e.g., mcp_config.json):

{
"mcpServers": {
"figma-python": {
"command": "figma-mcp",
"args": [
"--figma-api-key=your_figma_key"
]
} 
}
}

Install uv and set up the environment

curl -LsSf https://astral.sh/uv/install.sh | sh
uv venv
source .venv/bin/activate
uv sync

Test locally

python -m figma_mcp.main
Read from source at commit d30f4fe14d95OBSERVED · 2026-10-07
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add figma-mcp --env FIGMA_API_TOKEN=${FIGMA_API_TOKEN} -- uvx figma-mcp
claude-desktop
{
  "mcpServers": {
    "figma-mcp": {
      "command": "uvx",
      "args": [
        "figma-mcp"
      ],
      "env": {
        "FIGMA_API_TOKEN": "${FIGMA_API_TOKEN}"
      }
    }
  }
}
03

Exposed tools (3)

3 read · 0 write · 0 destructive.

ToolRiskDescription
get_componentsreadGet components available in a Figma file
get_nodereadGet a specific node from a Figma file
get_workflowreadGet workflows available in a Figma file
04

Trust audit

CAUTIONgrade B · trust 83/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (2 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (7)

MEDIUMInventory / provenance · inv.binary · CWE-1104
figma_mcp/__pycache__/__init__.cpython-312.pyc
__init__.cpython-312.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
figma_mcp/__pycache__/__init__.cpython-313.pyc
__init__.cpython-313.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
figma_mcp/__pycache__/clean_node.cpython-312.pyc
clean_node.cpython-312.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
figma_mcp/__pycache__/clean_node.cpython-313.pyc
clean_node.cpython-313.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
figma_mcp/__pycache__/main.cpython-313.pyc
main.cpython-313.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
figma_mcp/clean_node.py:18
return hashlib.md5(style_str.encode()).hexdigest()
LOWSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:59
curl -LsSf https://astral.sh/uv/install.sh | sh

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha d30f4fe14d95full audit observations/trust-audit/mcp-server/jayzeedesign__figma-4.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-07d30f4fe14d95CAUTIONB83first audit
06

Questions

What tools does Figma expose?

3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Figma safe to connect to an agent?

With care. The audit graded it B (83/100) and found 7 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Figma need?

It reads FIGMA_API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (d30f4fe14d95), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement