mjd

figma-mcp

VOUCH86·B

ModelContextProtocol server for Figma

Trust report

Scanned 2026-07-09 · MCP 2024-11-05

Scored by MCP Vouch against the OWASP MCP Top 10. SKIP applies to HTTP-only checks not relevant for stdio servers and is excluded from the score.

PASSMCP01Tool Poisoning10 / 10
PASSMCP02Insufficient Input Validation10 / 10
SKIPMCP03Resource Injection—
PASSMCP04Unauthorized Capability Exposure10 / 10
SKIPMCP05Missing Authentication—
SKIPMCP06Insecure Transport—
PASSMCP07Shadow Tool Registration10 / 10
PASSMCP08Lack of Audit and Telemetry10 / 10
WARNMCP09Inadequate Rate Limiting5 / 10
WARNMCP10Supply Chain Risk5 / 10

Slug

npm-figma-mcp

License

Unspecified

Quality score

Not yet probed

Trust score

VOUCH86·B

Latest version

0.1.4

Published

2025-05-04

Homepage

—

Repository

—

Capabilities

Not yet declared in the manifest.

Embed the live badge

Always reflects the current grade. Score drops → badge drops. No vanity lock.

[![MCP trust score](https://mcp-registry-dh5.pages.dev/api/badge/npm-figma-mcp.svg)](https://mcp-registry-dh5.pages.dev/servers/npm-figma-mcp/)

Install

One-click cross-client install (Claude Code, Claude Desktop, Cursor, Windsurf) coming soon. The registry will write the correct config fragment to the correct file — no copy-paste.