Description

Figma-Context-MCP is a server implementation that bridges AI assistants with the Figma design platform, enabling direct access to Figma file data through the MCP protocol. It transforms complex Figma API responses into simplified, structured design information that includes layout properties, styling, and text content, making it easier for AI assistants to understand and reason about design files. The server provides tools for retrieving complete Figma files or specific nodes, downloading images, and processing design hierarchies - making it particularly valuable for design review workflows, code generation from designs, and collaborative design discussions.

Installation

git clone https://github.com/1yhy/figma-context-mcp

Claude Desktop Configuration

Add this configuration to your Claude Desktop config file to enable this MCP server:

Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json

Config file location: %APPDATA%\Claude\claude_desktop_config.json

Config file location: ~/.config/Claude/claude_desktop_config.json

claude_desktop_config.json
{
  "mcpServers": {
    "figma-context": {
      "command": "node",
      "args": [
        "path/to/server.js"
      ]
    }
  }
}

Security Audit

64 /100
🟡 Moderate Audited 2026-05-22 View methodology →
Dimension Result Details
📡 Transport Security Stdio (Local) Stdio is local-only process communication. SSE/HTTP exposes network attack surface.
🔐 Authentication API Key Static API key — long-lived secret must be stored securely.
⏱️ Token Lifecycle Long-lived (Static) Short-lived tokens limit exposure window if compromised. Long-lived tokens require secure rotation policies.
🛡️ Input Handling Parameterized (Safe) Parameterized inputs prevent injection attacks. Shell strings enable command injection vectors.
🌍 Data Residency Cloud Local-only data never leaves your machine. Cloud residency means data flows through third-party APIs.
Auditor Notes: Reads Figma design data via Figma Personal Access Token (long-lived). Stdio transport. Data fetched from Figma cloud APIs.