Claude To Figma MCP Server

claude-to-figma npm v1.1.1

Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.

MCP bridge to create and modify Figma designs from Claude

Trust grade
A
95/100
Last scanned get badge →
Trust
A · 95/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
Moderate
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
Share this Trust Score
𝕏 Share LinkedIn Reddit
A Why this grade threat 100 − adoption risk = 95/100

The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.

1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:

The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.

2. Client adoption risk — 100 − 5 = 95. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:

PointsAdoption-risk factor
−3 capability blast radius (moderate) — client exposure if the model is manipulated
−2 publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind a deduction.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

Tools 116

Each tool and what it can reach — statically extracted from the published source.

  • get_page_presetsingests untrusted input
  • add_reference_imageno sensitive capability
  • analyze_compositionno sensitive capability
  • append_to_frameno sensitive capability
  • apply_effect_styleno sensitive capability
  • apply_fill_styleno sensitive capability
  • apply_stroke_styleno sensitive capability
  • apply_text_styleno sensitive capability
  • audit_variable_usageno sensitive capability
  • bind_variableno sensitive capability
Show 106 more tools ↓
  • boolean_excludeno sensitive capability
  • boolean_intersectno sensitive capability
  • boolean_subtractno sensitive capability
  • boolean_unionno sensitive capability
  • bring_to_frontno sensitive capability
  • check_alignmentno sensitive capability
  • check_contrastno sensitive capability
  • check_node_contrastno sensitive capability
  • checkpointno sensitive capability
  • clear_active_pageno sensitive capability
  • clear_selectionno sensitive capability
  • clone_nodeno sensitive capability
  • connect_to_figmano sensitive capability
  • create_componentno sensitive capability
  • create_component_from_nodeno sensitive capability
  • create_ellipseno sensitive capability
  • create_frameno sensitive capability
  • create_groupno sensitive capability
  • create_image_rectangleno sensitive capability
  • create_instanceno sensitive capability
  • create_instance_from_keyno sensitive capability
  • create_lineno sensitive capability
  • create_pageno sensitive capability
  • create_paint_styleno sensitive capability
  • create_polygonno sensitive capability
  • create_rectangleno sensitive capability
  • create_starno sensitive capability
  • create_textno sensitive capability
  • create_variableno sensitive capability
  • create_variable_collectionno sensitive capability
  • delete_nodeno sensitive capability
  • detach_instanceno sensitive capability
  • duplicate_nodeno sensitive capability
  • export_design_tokensno sensitive capability
  • export_nodeno sensitive capability
  • extract_variables_from_componentno sensitive capability
  • extract_variables_from_pageno sensitive capability
  • extract_variables_from_projectno sensitive capability
  • extract_variables_from_selectionno sensitive capability
  • find_node_by_nameno sensitive capability
  • flattenno sensitive capability
  • get_active_pageno sensitive capability
  • get_connection_statusno sensitive capability
  • get_current_pageno sensitive capability
  • get_document_infono sensitive capability
  • get_icon_folderno sensitive capability
  • get_local_componentsno sensitive capability
  • get_local_stylesno sensitive capability
  • get_local_variablesno sensitive capability
  • get_nodes_infono sensitive capability
  • get_remote_componentsno sensitive capability
  • get_selectionno sensitive capability
  • get_spacing_infono sensitive capability
  • get_styled_text_segmentsno sensitive capability
  • import_color_tokensno sensitive capability
  • insert_childno sensitive capability
  • insert_iconno sensitive capability
  • insert_local_iconno sensitive capability
  • insert_svgno sensitive capability
  • list_all_nodesno sensitive capability
  • list_local_iconsno sensitive capability
  • list_pagesno sensitive capability
  • load_font_asyncno sensitive capability
  • move_backwardno sensitive capability
  • move_forwardno sensitive capability
  • move_nodeno sensitive capability
  • organize_pagesno sensitive capability
  • remove_effectsno sensitive capability
  • remove_strokeno sensitive capability
  • resize_nodeno sensitive capability
  • run_validation_cycleno sensitive capability
  • scan_text_nodesno sensitive capability
  • select_allno sensitive capability
  • select_nodesno sensitive capability
  • send_to_backno sensitive capability
  • set_active_pageno sensitive capability
  • set_auto_layoutno sensitive capability
  • set_blend_modeno sensitive capability
  • set_clip_contentno sensitive capability
  • set_constraintsno sensitive capability
  • set_corner_radiino sensitive capability
  • set_corner_radiusno sensitive capability
  • set_effectsno sensitive capability
  • set_fill_colorno sensitive capability
  • set_icon_folderno sensitive capability
  • set_image_fillno sensitive capability
  • set_linear_gradientno sensitive capability
  • set_lockedno sensitive capability
  • set_multiple_text_contentsno sensitive capability
  • set_node_nameno sensitive capability
  • set_opacityno sensitive capability
  • set_radial_gradientno sensitive capability
  • set_rotationno sensitive capability
  • set_strokeno sensitive capability
  • set_styled_text_segmentsno sensitive capability
  • set_text_contentno sensitive capability
  • set_text_propertiesno sensitive capability
  • set_variable_valueno sensitive capability
  • set_viewportno sensitive capability
  • set_visibleno sensitive capability
  • suggest_accessible_colorno sensitive capability
  • sync_variables_with_pageno sensitive capability
  • ungroupno sensitive capability
  • validate_designno sensitive capability
  • verify_nodes_existno sensitive capability
  • zoom_to_fitno sensitive capability

What this scan could not see

Versions 1

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

VersionScoreFindingsEngineScanned
v1.1.1 latest A 95/100 0 1.13.0 2026-09-08

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

MCP Trust Score: A · 95/100
Markdown (GitHub README)
[![MCP Trust Score](https://mcptrustchecker.com/registry/claude-to-figma/badge.svg)](https://mcptrustchecker.com/registry/claude-to-figma)
HTML
<a href="https://mcptrustchecker.com/registry/claude-to-figma"><img src="https://mcptrustchecker.com/registry/claude-to-figma/badge.svg" alt="MCP Trust Score" height="20"></a>
Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/claude-to-figma/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan claude-to-figma --online

Use the free API → How scoring works

More in Design & Media