Figma Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Figma Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Connect Figma to Claude via MCP
This method is about governance (auditing and maintaining quality), not implementation!
Most official MCPs (like Figma’s) only work with Dev Mode and follow a freemium model. This server bypasses that limitation by allowing direct access to file data via the public API. And it’s completely free! 💯
No coding needed, just configuration. Feel free to audit the files yourself, or run them through an LLM for a quick review.
Before starting, <a href="https://github.com/zeitmaschinen/figma-mcp-server/archive/refs/heads/main.zip" target="_blank">download the project files here</a> and extract the ZIP to your computer.
This ZIP file contains:
.env file for your Figma tokenWhat is it? A program that allows you to run JavaScript code on your computer.
How to install:
You can test if it worked:
Windows + R, type cmd and press EnterCommand + Space, type terminal and press EnterIn the window that opened, type:
node --versionPress Enter. If something like v23.10.0 appears, it worked!
figma-mcp-server-main.zipYou should now have a folder called figma-mcp-server-main with these files inside:
/figma-mcp-server-main/
├── src/ (source code for reference)
│ └── server.ts
├── .env (you'll add your Figma token here)
├── .gitignore
├── package.json
├── package-lock.json
└── tsconfig.jsonWindows:
figma-mcp-server-main folderMac:
cd (with a space after)figma-mcp-server-main folder into the terminal windowIn the terminal (inside the project folder), type:
npm installPress Enter and wait (may take 1-3 minutes). This will install all dependencies required to run the server.
When finished, all the necessary libraries will be downloaded into a node_modules folder.
#### 5.1: Generate token
figd_ABC123...)#### 5.2: Add token to .env file
figma-mcp-server-main folder, open the .env file in a text editor (Notepad on Windows or TextEdit on Mac)FIGMA_ACCESS_TOKEN=FIGMA_ACCESS_TOKEN=figd_XYZ123ABC...Example:
FIGMA_ACCESS_TOKEN=figd_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6Now we need to compile the TypeScript code into JavaScript that Node.js can run.
In the terminal (inside the project folder), type:
npm run buildPress Enter and wait. You'll see some output, and a new build/ folder will be created inside your main folder.
#### 7.1: Find your project's complete path
In the terminal (inside the project folder), type:
Windows:
cdMac/Linux:
pwdSomething like this will appear:
C:\Users\YourName\Documents\figma-mcp-server-main/Users/yourname/Documents/figma-mcp-server-mainCopy this complete path! Write it down, you'll need it in the next step.
#### 7.2: Find Claude's configuration file
On Mac:
Command + Shift + G~/Library/Application Support/Claudeclaude_desktop_config.jsonOn Windows:
Windows + R%APPDATA%\Claudeclaude_desktop_config.jsonIf the file DOESN'T EXIST:
claude_desktop_config.json in that folder#### 7.3: Edit the configuration file
claude_desktop_config.json file in Notepad or TextEdit{
"mcpServers": {
"figma-design-system": {
"command": "node",
"args": [
"PASTE_PATH_HERE/build/server.js"
],
"env": {
"FIGMA_ACCESS_TOKEN": "PASTE_YOUR_TOKEN_HERE"
}
}
}
}PASTE_PATH_HERE with the path you copied in Step 7.1PASTE_YOUR_TOKEN_HERE with your Figma tokenFinal example (Mac):
{
"mcpServers": {
"figma-design-system": {
"command": "node",
"args": [
"/Users/maria/Documents/figma-mcp-server-main/build/server.js"
],
"env": {
"FIGMA_ACCESS_TOKEN": "figd_ABC123XYZ..."
}
}
}
}Final example (Windows):
{
"mcpServers": {
"figma-design-system": {
"command": "node",
"args": [
"C:\\Users\\Maria\\Documents\\figma-mcp-server-main\\build\\server.js"
],
"env": {
"FIGMA_ACCESS_TOKEN": "figd_ABC123XYZ..."
}
}
}
}Now go to Claude Desktop and ask:
Claude, show me all the components from my Figma file!
File key: ABC123XYZHow to get your file key:
node --version works)npm install completed successfully.env file has your Figma tokenclaude_desktop_config.json has the correct path with proper slashesclaude_desktop_config.json has your Figma tokenFirst of all, one tip: Remember to always provide the file key to Claude in your initial request or whenever you want to analyze a new file. Otherwise, it will ask for it. 😊
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.