Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
MCPpedia last refreshed this data
Figma Context MCP is an MCP server that give your coding agent access to your Figma data. Implement designs in any framework in one-shot. Its tool list has not been published yet over stdio, requires no API key, and scores 69/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"Framelink Figma MCP": {
"args": [
"-y",
"figma-developer-mcp",
"--figma-api-key=YOUR-KEY",
"--stdio"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
FIGMA_API_KEYFigma Personal Access Token1. Go to Figma Settings 2. Scroll to Personal Access Tokens 3. Click "Generate new token" 4. Replace YOUR-KEY in the configOpen Figma Personal Access Token page
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'figma-developer-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
figma-developer-mcp vulnerable to command injection in get_figma_data tool
### Summary A command injection vulnerability exists in the `figma-developer-mcp` MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the p
figma-developer-mcp vulnerable to command injection in get_figma_data tool
### Summary A command injection vulnerability exists in the `figma-developer-mcp` MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the p
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in design
AI-native design editor. Open-source Figma alternative.
Draw and visually collaborate with your agents on tldraw's canvas.
Design tokens from any live site: colours, type, spacing, components, drift against a baseline.
MeiGen-AI-Design-MCP — Turn Claude Code / OpenClaw into your local Lovart. Local ComfyUI, 1,400+ prompt library, multi-direction parallel generation.
MCP Security Weekly
Get CVE alerts and security updates for Figma Context MCP and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.