FigmaExporterMcp (ChenLongbetterapp/FigmaExporterMcp) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 65 tools. No publisher has claimed this listing.

D
Caution
58/100

FigmaExporterMcp

A local bridge that lets MCP clients inspect, export, and modify Figma files through a development Figma plugin.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

ChenLongbetterapp

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// tools this server exposes65 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

get_document_info

Get detailed information about the current Figma document

get_selection

Get information about the current selection in Figma

read_my_design

Get detailed information about the current selection in Figma, including all node details

get_node_info

Get detailed information about a specific node in Figma

get_nodes_info

Get detailed information about multiple nodes in Figma

create_rectangle

Create a new rectangle in Figma

create_frame

Create a new frame in Figma

create_text

Create a new text element in Figma

set_fill_color

Set the fill color of a node in Figma can be TextNode or FrameNode

set_stroke_color

Set the stroke color of a node in Figma

move_node

Move a node to a new position in Figma

clone_node

Clone an existing node in Figma

resize_node

Resize a node in Figma

delete_node

Delete a node from Figma

delete_multiple_nodes

Delete multiple nodes from Figma at once

export_node_as_image

Export a node as an image from Figma

set_text_content

Set the text content of an existing text node in Figma

get_styles

Get all styles from the current Figma document

get_local_components

Get all local components from the Figma document

get_annotations

Get all annotations in the current document or specific node

set_annotation

Create or update an annotation

set_multiple_annotations

Set multiple annotations parallelly in a node

create_component_instance

Create an instance of a component in Figma. Use componentId for fast local component instantiation, or componentKey for library imports.

get_instance_overrides

Get all override properties from a selected component instance. These overrides can be applied to other instances, which will swap them to match the source component.

set_instance_overrides

Apply previously copied overrides to selected component instances. Target instances will be swapped to the source component and all copied override properties will be applied.

set_corner_radius

Set the corner radius of a node in Figma

scan_text_nodes

Scan all text nodes in the selected Figma node

scan_nodes_by_types

Scan for child nodes with specific types in the selected Figma node

set_multiple_text_contents

Set multiple text contents parallelly in a node

set_layout_mode

Set the layout mode and wrap behavior of a frame in Figma

set_padding

Set padding values for an auto-layout frame in Figma

set_axis_align

Set primary and counter axis alignment for an auto-layout frame in Figma

set_layout_sizing

Set horizontal and vertical sizing modes for an auto-layout frame in Figma

set_item_spacing

Set distance between children in an auto-layout frame

get_reactions

Get Figma Prototyping Reactions from multiple nodes. CRITICAL: The output MUST be processed using the 'reaction_to_connector_strategy' prompt IMMEDIATELY to generate parameters for connector lines via the 'create_connections' tool.

set_default_connector

Set a copied connector node as the default connector

create_connections

Create connections between nodes using the default connector style

set_focus

Set focus on a specific node in Figma by selecting it and scrolling viewport to it

set_selections

Set selection to multiple nodes in Figma and scroll viewport to show them

create_component

Create a new Component (not an instance) in Figma. This is the foundation for building a component library.

create_component_set

Combine multiple Component variants into a ComponentSet. Each component must have variant-style naming like 'Property=Value'.

insert_svg

Insert an SVG string into Figma. Use this to create icons from SVG markup. The SVG will be converted to Figma vector nodes.

set_component_property

Add a Component Property (Boolean, Text, Instance Swap, or Variant) to a Component or ComponentSet. For INSTANCE_SWAP: defaultValue must be the component KEY (not node ID), and targetChildId should be the child Instance node whose mainComponent will be linked.

set_component_property_references

Set componentPropertyReferences on a sublayer within a Component. Links a child node's property to an existing component property. Keys: 'visible'|'characters'|'mainComponent'.

create_variable_collection

Create a new Variable Collection with modes. Use this to set up the theming system (Colors, Spacing, Radius, Typography, Font collections).

create_variable

Create a new Variable in an existing Variable Collection.

set_variable_value

Set the value of a Variable for a specific mode. For COLOR type, pass hex string like '#FF0000'.

set_variable_mode_name

Rename a mode in a Variable Collection.

bind_variable

Bind a Variable to a node property. This connects component properties to the theming system.

set_opacity

Set the opacity of a node (0 to 1).

set_visibility

Show or hide a node.

set_text_style

Set text style properties: font family, size, weight, line height, letter spacing, alignment, decoration, case.

set_effects

Set effects on a node: drop shadow, inner shadow, layer blur, background blur.

create_ellipse

Create an ellipse/circle in Figma. Useful for avatars, radio buttons, status indicators.

create_line

Create a line in Figma. Useful for dividers.

flatten_node

Flatten a node (or group) into a single vector. Useful for cleaning up imported SVG icons.

create_boolean_operation

Create a boolean operation (union, subtract, intersect, exclude) from multiple nodes. Useful for complex icon shapes.

batch_create

Execute multiple Figma commands in a single batch call. Dramatically improves performance for bulk operations like creating many icons or setting up variables.

get_local_variables

Get all local Variable Collections and their variables with values. Useful for inspecting the current variable/theming setup.

set_node_name

Rename a node in Figma.

group_nodes

Group multiple nodes together.

convert_to_component

Convert an existing Frame or Group into a Component. Preserves all children and properties.

create_icon_component

Create an icon component from SVG content. Inserts SVG, flattens vectors, resizes to standard size, sets fill color, and converts to a Component. Returns component ID and key.

get_connected_files

List all Figma design files currently connected via the FigmaExporter plugin. Shows which file is active (receives commands).

set_active_file

Switch which Figma file receives commands. Pass a file name or channel keyword to match.

// known CVEs in dependencies3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.13.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.13.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.13.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configFIGMA_EXPORTER_EXPORT_DIR'D:\LongWorkspace\FigmaExporterMcp\exports'
configFIGMA_EXPORTER_RELAY_PORT3066 WebSocket/HTTP relay port
configFIGMA_EXPORTER_SESSION_IDauto-generated per MCP process Optional stable session id for active-file routing
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

65/65 tools missing one or more hints — get_document_info (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_selection (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); read_my_design (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +62 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

56/65 tool handlers declare input schemas (86%)

Declare an inputSchema with zod/joi/yup on every tool definition.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.13.1 (high), @modelcontextprotocol/sdk@1.13.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/chenlongbetterapp/figmaexportermcp?variant=verified)](https://m8ven.ai/mcp/chenlongbetterapp/figmaexportermcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 48360dbf4196fe86898796e09f49b234f101a1d5
code hash: 0f4348ebc40a6fbe0756e3db2b865042125f8f24ffaf32f538d08e8572e7df27
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client