Is io.github.tathagat22/plumb-mcp safe to use?

io.github.tathagat22/plumb-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.tathagat22/plumb-mcp?

io.github.tathagat22/plumb-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.tathagat22/plumb-mcp?

io.github.tathagat22/plumb-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.tathagat22/plumb-mcp actively maintained?

io.github.tathagat22/plumb-mcp is actively maintained — last commit was 2 days ago. It has 47 GitHub stars.

io.github.tathagat22/plumb-mcp

Figma → code MCP: no rate limits, no metered quotas, verification loop. Works on every Figma plan.

47 0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-tathagat22-plumb-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tathagat22-plumb-mcp)](https://mcppedia.org/s/io-github-tathagat22-plumb-mcp)

Read me

What io.github.tathagat22/plumb-mcp does

The Figma → code MCP with a verification loop. Designs go in, normalised specs come out, and plumb-mcp verify drives headless Chrome to prove your rendered code actually matches what's in Figma.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

24/100across 5 weighted dimensions

How we score →

0255075100

−76

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tathagat22/plumb-mcp safe to use?: io.github.tathagat22/plumb-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tathagat22/plumb-mcp?: io.github.tathagat22/plumb-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.tathagat22/plumb-mcp?: io.github.tathagat22/plumb-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.tathagat22/plumb-mcp actively maintained?: io.github.tathagat22/plumb-mcp is actively maintained — last commit was 2 days ago. It has 47 GitHub stars.

Similar servers

Others in design

View all →

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

io.github.miroapp/mcp-server95

Official Miro MCP server - Supports context to code and creating diagrams, docs, and data tables.

112 7

Image MCP Server94

AI image generation and editing with prompt optimization and quality presets. Powered by Nano Banana

114 2

Cds Mcp Server93

Coinbase Design System - MCP Server

476 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.tathagat22/plumb-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-tathagat22-plumb-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tathagat22-plumb-mcp)](https://mcppedia.org/s/io-github-tathagat22-plumb-mcp)

Read me

What io.github.tathagat22/plumb-mcp does

The Figma → code MCP with a verification loop. Designs go in, normalised specs come out, and plumb-mcp verify drives headless Chrome to prove your rendered code actually matches what's in Figma.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

Plumb (`plumb-mcp`)

The Figma → code MCP with a verification loop. Designs go in, normalised specs come out, and plumb-mcp verify drives headless Chrome to prove your rendered code actually matches what's in Figma.

📖 Full docs: https://tathagat22.github.io/plumb-mcp/ · 📦 npm: plumb-mcp · 🇨🇳 简体中文 · 🇯🇵 日本語 · 🇰🇷 한국어

Built for coding agents — Claude Code, Cursor, Windsurf, anything MCP-compatible. Reads Figma through a desktop-app plugin (no REST rate limits, works on every plan including Free), returns a compact normalised spec instead of the multi-hundred-thousand-token JSON the Figma API emits, and exports SVG icons + PNG images straight to disk.

How plumb is different

Three other Figma MCP servers worth knowing:

Figma's official Dev Mode MCP — bidirectional, but plan-gated and metered.
Framelink — thin REST wrapper. Two tools. No verification, inherits rate limits.
cursor-talk-to-figma — bidirectional automation for designers working in Figma.

Plumb is the only one that closes the loop on code. plumb_verify (MCP tool) and plumb-mcp verify (CLI) tell you whether the code your agent shipped actually matches the design — colour-coded deltas, no pixel diff, runs in CI.

Are you hitting one of these?

If your agent landed here from an error, Plumb probably solves it.

Error you're seeing	Why Plumb fixes it
`Figma Dev Mode MCP exceeded the 25k token cap` · `351,378 tokens observed`	PDS dedups design tokens (`$c1`, `$t1` …) and pre-resolves auto-layout to flexbox. A 178-node dialog comes back at ~2.6k tokens.
`Dev Mode MCP: 6 tool calls per month limit` · `Starter plan tool-call limit reached`	Plumb's plugin path has no per-call quota on any plan, including Free.
`Framelink figma-developer-mcp HTTP 429` · `Figma REST API rate limit exceeded`	The plugin path doesn't touch REST. Zero rate limits.
`Variables API requires Enterprise plan` · `403 Forbidden on variables`	Plumb reads Variables through the Figma Plugin API — works on every plan.
`Figma MCP returned 85% wrong layout` · hallucinated structure	Plumb returns structured PDS (not parsed prose) and ships `plumb_verify` + a `plumb-mcp verify` CLI that diff your rendered DOM against the design.
`Dev Mode MCP requires selection` · "Open desktop app with the right selection"	Plumb streams the whole file inventory the moment the plugin pairs. No per-call selection dance.

Install: npm install -g plumb-mcp → plumb-mcp init.

Quick start

# 1. Install
npm install -g plumb-mcp

# 2. Wire into your editor — auto-detects Claude Code / Cursor / VS Code / Windsurf
plumb-mcp init

# 3. Sideload the Figma plugin (one-time). Find the manifest:
echo "$(npm root -g)/plumb-mcp/figma-plugin/manifest.json"
#    Figma desktop → Plugins → Development → Import plugin from manifest…
#    Run Plumb → click "Pair with Plumb" → done. Future runs collapse to a dot.

# 4. Optional — verify rendered code against Figma from the terminal
plumb-mcp verify http://localhost:5173/dashboard --url <figma-url>

Other install paths: npx plumb-mcp · docker run --rm -i ghcr.io/tathagat22/plumb-mcp:latest · build from source.

The fourteen MCP tools

Tool	What it does
`plumb_status`	Self-description, key legend, connection state. Call first.
`plumb_outline`	Every screen in the file (id, name, size).
`plumb_node`	Extract a screen as compact PDS — by id or by name.
`plumb_query`	Pull a slice (`skeleton` / `buttons` / `text` / `components`) when a full screen would blow the token budget.
`plumb_describe`	Text-only visua

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

24/100across 5 weighted dimensions

How we score →

0255075100

−76

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tathagat22/plumb-mcp safe to use?: io.github.tathagat22/plumb-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tathagat22/plumb-mcp?: io.github.tathagat22/plumb-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.tathagat22/plumb-mcp?: io.github.tathagat22/plumb-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.tathagat22/plumb-mcp actively maintained?: io.github.tathagat22/plumb-mcp is actively maintained — last commit was 2 days ago. It has 47 GitHub stars.

Similar servers

Others in design

View all →

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

io.github.miroapp/mcp-server95

Official Miro MCP server - Supports context to code and creating diagrams, docs, and data tables.

112 7

Image MCP Server94

AI image generation and editing with prompt optimization and quality presets. Powered by Nano Banana

114 2

Cds Mcp Server93

Coinbase Design System - MCP Server

476 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.tathagat22/plumb-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

io.github.tathagat22/plumb-mcp

Install in your client

What io.github.tathagat22/plumb-mcp does

Test This Server

Why this score

24/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.tathagat22/plumb-mcp

Install in your client

What io.github.tathagat22/plumb-mcp does

Test This Server

Plumb (plumb-mcp)

How plumb is different

Are you hitting one of these?

Quick start

The fourteen MCP tools

Why this score

24/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

Plumb (plumb-mcp)

How plumb is different

Are you hitting one of these?

Quick start

The fourteen MCP tools

Plumb (`plumb-mcp`)

Plumb (`plumb-mcp`)