figma-developer-mcp

io.github.GLips/Figma-Context-MCP · version 0.13.2 · 150,783 weekly npm downloads · audited 2026-11-03

Notes

Findings

No hidden-instruction or invisible-character findings in any tool, prompt, or resource description.

Claude Connectors Directory readiness

✅ Every tool has a title 2 of 2 tools
❌ Every tool declares readOnlyHint or destructiveHint Missing on 1 of 2: download_figma_images
✅ Tool names are 64 characters or fewer All within limit
✅ Descriptions avoid instructions about model behavior or other tools None found
✅ No hidden instructions or invisible characters in tool metadata None found

Checks the directory's published tool requirements that are visible from tools/list. Passing them does not guarantee acceptance.

What this server's tools can do

Makes outbound web requests: download_figma_images

Not a vulnerability by itself. It tells you what an injected prompt could ask this server to do, so you can decide which tools need approval.

Supply chain

Install scripts: none
npm provenance: yes
Source repository linked: yes
License: MIT
Direct dependencies: 16

Tools (2)

Name	Title	Hint	Description
`get_figma_data`	Get Figma Data	read-only	Get comprehensive Figma file data including layout, content, visuals, and component information
`download_figma_images`	Download Figma Images	none	Download SVG and PNG images used in a Figma file based on the IDs of image or icon nodes. Images will be saved relative to the server's image directory: /app

Check your own setup

npx mcpvetter scan --live

Badge

Add this to a README:

[![MCPVetter](https://mcpvetter.com/badge/figma-developer-mcp.svg)](https://mcpvetter.com/servers/figma-developer-mcp)

Publish this server?

Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.