io.scalably/figma-mcp

@scalably-io/figma-mcp

Figma MCP: list frames in a file and fetch one frame's JSON and image safely. 2 tools.

54/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 4d ago

Works with most clients

Transport: stdio

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.scalably/figma-mcp is an MCP server that figma MCP: list frames in a file and fetch one frame's JSON and image safely. 2 tools. Its tool list has not been published yet over stdio, requires no API key, and scores 60/100 on MCPpedia's security, maintenance and efficiency rubric.

Design

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-scalably-figma-mcp": {
      "args": [
        "-y",
        "@scalably-io/figma-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-scalably-figma-mcp)](https://mcppedia.org/s/io-scalably-figma-mcp)

Read me

What io.scalably/figma-mcp does

Figma MCP: list frames in a file and fetch one frame's JSON and image safely. 2 tools.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@scalably-io/figma-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @scalably-io/figma-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.scalably/figma-mcp safe to use?: io.scalably/figma-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.scalably/figma-mcp?: io.scalably/figma-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.scalably/figma-mcp?: io.scalably/figma-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.scalably/figma-mcp actively maintained?: io.scalably/figma-mcp is actively maintained - last commit was 4 days ago.

Similar servers

Others in design

View all →

io.github.dembrandt/dembrandt95

Design tokens from any live site: colours, type, spacing, components, drift against a baseline.

4.0k 7

Tldraw MCP Server94

Draw and visually collaborate with your agents on tldraw's canvas.

51.4k 6

MeiGen AI Design MCP93

MeiGen-AI-Design-MCP — Turn Claude Code / OpenClaw into your local Lovart. Local ComfyUI, 1,400+ prompt library, multi-direction parallel generation.

1.8k 6

Threejs Devtools MCP Server92

Inspect and edit Three.js scenes, materials, shaders, lights in real time from any AI agent

129 2

MCP Security Weekly

Get CVE alerts and security updates for io.scalably/figma-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Setup

Create a personal access token at figma.com under account settings, with file_content:read scope.

Find the file key in any Figma file URL: it is the segment after /design/ or /file/, for example https://www.figma.com/design/AbC123xyz/My-file gives AbC123xyz. Both tools take it as file_key.

If FIGMA_TOKEN is not set the server still starts and lists its tools; every call then fails with FIGMA_NOT_CONFIGURED until the token is provided.

fetch_frame is the only tool that writes files (so it is not marked read-only); it writes frame.png, node.json, and fills.json into a directory below the configured output root (default ./figma-output). The other tool is fully read-only.

Tools (2)

Tool	What it does
`list_frames`	List and optionally filter all top-level FRAME nodes in a Figma file, with exact page/name/node-id data, dimensions, and file metadata
`fetch_frame`	Fetch one Figma frame and transactionally write frame.png, node.json, and a normalized image-fill map into a directory below the output root

Tool

What it does

list_frames

List and optionally filter all top-level FRAME nodes in a Figma file, with exact page/name/node-id data, dimensions, and file metadata

fetch_frame

Fetch one Figma frame and transactionally write frame.png, node.json, and a normalized image-fill map into a directory below the output root

Configuration

Variable	Required	Purpose
`FIGMA_TOKEN`	yes	Figma personal access token with `file_content:read`
`FIGMA_API_BASE_URL`	no	Override the Figma REST API base URL (default `https://api.figma.com/v1`)
`FIGMA_REQUEST_TIMEOUT_MS`	no	Per-request timeout in milliseconds (default 60000)
`FIGMA_MAX_JSON_BYTES`	no	Upper bound on a Figma JSON response, in bytes (default 104857600)
`FIGMA_MAX_FRAME_BYTES`	no	Upper bound on a downloaded frame PNG, in bytes (default 104857600)
`FIGMA_OUTPUT_ROOT`	no	Directory that every `fetch_frame` output directory must stay below (default `./figma-output`, created on first use)
`FIGMA_ALLOW_HTTP_FOR_TESTS`	no	Test suite only: `1` allows a plain-HTTP loopback API base. Never set it in normal use

Variable

Required

Purpose

FIGMA_TOKEN

yes

Figma personal access token with file_content:read

FIGMA_API_BASE_URL

Override the Figma REST API base URL (default https://api.figma.com/v1)

FIGMA_REQUEST_TIMEOUT_MS

Per-request timeout in milliseconds (default 60000)

FIGMA_MAX_JSON_BYTES

Upper bound on a Figma JSON response, in bytes (default 104857600)

FIGMA_MAX_FRAME_BYTES

Upper bound on a downloaded frame PNG, in bytes (default 104857600)

FIGMA_OUTPUT_ROOT

Directory that every fetch_frame output directory must stay below (default ./figma-output, created on first use)

FIGMA_ALLOW_HTTP_FOR_TESTS

Test suite only: 1 allows a plain-HTTP loopback API base. Never set it in normal use

This server runs locally, on your machine, under your own credentials. It collects no personal data, contains no telemetry, stores nothing persistently beyond the frame bundles you explicitly fetch, and talks only to the vendor API it wraps. No third party, including Scalably, receives your data. Contact: hello@scalably.io. Canonical copy: https://scalably.io/connector-privacy.html

Frequently Asked Questions

Is io.scalably/figma-mcp safe to use?

io.scalably/figma-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.scalably/figma-mcp?

io.scalably/figma-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.scalably/figma-mcp?

io.scalably/figma-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.scalably/figma-mcp actively maintained?

io.scalably/figma-mcp is actively maintained - last commit was 4 days ago.

Setup

Create a personal access token at figma.com under account settings, with file_content:read scope.

If FIGMA_TOKEN is not set the server still starts and lists its tools; every call then fails with FIGMA_NOT_CONFIGURED until the token is provided.

Tools (2)

Tool	What it does
`list_frames`	List and optionally filter all top-level FRAME nodes in a Figma file, with exact page/name/node-id data, dimensions, and file metadata
`fetch_frame`	Fetch one Figma frame and transactionally write frame.png, node.json, and a normalized image-fill map into a directory below the output root

Tool

What it does

list_frames

List and optionally filter all top-level FRAME nodes in a Figma file, with exact page/name/node-id data, dimensions, and file metadata

fetch_frame

Fetch one Figma frame and transactionally write frame.png, node.json, and a normalized image-fill map into a directory below the output root

Configuration

Variable	Required	Purpose
`FIGMA_TOKEN`	yes	Figma personal access token with `file_content:read`
`FIGMA_API_BASE_URL`	no	Override the Figma REST API base URL (default `https://api.figma.com/v1`)
`FIGMA_REQUEST_TIMEOUT_MS`	no	Per-request timeout in milliseconds (default 60000)
`FIGMA_MAX_JSON_BYTES`	no	Upper bound on a Figma JSON response, in bytes (default 104857600)
`FIGMA_MAX_FRAME_BYTES`	no	Upper bound on a downloaded frame PNG, in bytes (default 104857600)
`FIGMA_OUTPUT_ROOT`	no	Directory that every `fetch_frame` output directory must stay below (default `./figma-output`, created on first use)
`FIGMA_ALLOW_HTTP_FOR_TESTS`	no	Test suite only: `1` allows a plain-HTTP loopback API base. Never set it in normal use

Variable

Required

Purpose

FIGMA_TOKEN

yes

Figma personal access token with file_content:read

FIGMA_API_BASE_URL

Override the Figma REST API base URL (default https://api.figma.com/v1)

FIGMA_REQUEST_TIMEOUT_MS

Per-request timeout in milliseconds (default 60000)

FIGMA_MAX_JSON_BYTES

Upper bound on a Figma JSON response, in bytes (default 104857600)

FIGMA_MAX_FRAME_BYTES

Upper bound on a downloaded frame PNG, in bytes (default 104857600)

FIGMA_OUTPUT_ROOT

Directory that every fetch_frame output directory must stay below (default ./figma-output, created on first use)

FIGMA_ALLOW_HTTP_FOR_TESTS

Test suite only: 1 allows a plain-HTTP loopback API base. Never set it in normal use

io.scalably/figma-mcp

Install in your client

What io.scalably/figma-mcp does

Test This Server

Why this score

60/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.scalably/figma-mcp

Install in your client

What io.scalably/figma-mcp does

Test This Server

Figma MCP

Install

Setup

Tools (2)

Configuration

Reply shape

Limits

Verify

Privacy Policy

License

Why this score

60/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

Figma MCP

Install

Setup

Tools (2)

Configuration

Reply shape

Limits

Verify

Privacy Policy

License