Figma UIBLOCK
AI can draw UI directly on the Figma canvas via JavaScript, and read existing designs back as structured data. Works with Claude Code, Cursor, VS Code, and Windsurf. No API KEY required.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Claude Code to Figma · Antigravity to Figma · Cursor to Figma · Any MCP IDE to Figma
✅ Tested: Claude Code, Antigravity | 🔧 Compatible: Cursor, VS Code, Windsurf, Zed (any MCP stdio client)
Bidirectional Figma MCP bridge — let AI assistants (Claude Code, Cursor, Windsurf, Antigravity, VS Code Copilot, or any MCP-compatible IDE) draw UI directly on Figma canvas and read existing designs back as structured data, screenshots, or code-ready tokens. No Figma API key needed — works entirely over localhost.
Requires Figma Desktop — the plugin communicates with the MCP server over localhost HTTP polling. Figma's web app does not allow localhost network access, so Figma Desktop is required.Claude ──figma_write──▶ MCP Server ──HTTP (localhost:38451)──▶ Figma Plugin ──▶ Figma Document Claude ◀─figma_read──── MCP Server ◀──HTTP (localhost:38451
e21bde8ed4abOBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add figma-ui-mcp -- npx -y [email protected]
Exposed tools (5)
4 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
figma_docs | read | Get the API reference and design rules for figma_write. |
figma_read | read | READ design data from Figma — extract node trees, colors, typography, spacing, and screenshots. |
figma_rules | read | Generate a design system rule sheet from the current Figma file — aggregates color tokens, |
figma_status | read | Check whether the Figma plugin bridge is connected. |
figma_write | write | Execute JavaScript code to CREATE or MODIFY designs in Figma. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (6 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
const { normalizeSvgPath } = new Function("return (function() {\n" + src + "\nreturn { normalizeSvgPath };\n})()")();plugin.zip
http.get(`http://127.0.0.1:${port}${path}`, (res) => {const url = `http://127.0.0.1:${port}/poll?sessionId=${sessionId}&fileName=${encodeURIComponent(fileName || sessionId)}`;@modelcontextprotocol/sdk
assets/cover.png
assets/logo-v6.png
Gates applied: no_behavioural_pass.
e21bde8ed4abfull audit observations/trust-audit/mcp-server/tranhoaihung__figma-ui.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | e21bde8ed4ab | BLOCK | D | 69 | first audit |
Questions
What is the Figma UI MCP server?
AI can draw UI directly on the Figma canvas via JavaScript, and read existing designs back as structured data. Works with Claude Code, Cursor, VS Code, and Windsurf. No API KEY required.
What tools does Figma UI expose?
5 in total: 4 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Figma UI safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Figma UI need?
No credential environment variables were found in its source, so it appears to need none.
How does Figma UI run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as figma-ui-mcp at 2.5.26.
How current is this page?
The grade is for one exact copy of the source (e21bde8ed4ab), read on 2026-10-06. The repository is watched and re-audited when it changes.