figma-console-mcp

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

→ southleft/figma-console-mcp· npm: figma-console-mcp· listed on npm

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: FIGMA_ACCESS_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPP_NAME

configENABLE_MCP_APPS— claude mcp add figma-console -s user -e FIGMA_ACCESS_TOKEN=figd_YOUR_TOKEN_HERE -e =true -- npx -y figma-console-mcp@latest

🔐 secretFIGMA_ACCESS_TOKEN— claude mcp add figma-console -s user -e =figd_YOUR_TOKEN_HERE -e ENABLE_MCP_APPS=true -- npx -y figma-console-mcp@latest

configFIGMA_CONSOLE_CONFIG

configFIGMA_MCP_MODE

configFIGMA_WS_HOST— Override the WebSocket server bind address (default: localhost). Set to 0.0.0.0 when running inside Docker so the host machine can reach the MCP server.

configFIGMA_WS_PORT— Override the preferred WebSocket port (default: 9223). The server will fall back through a 10-port range starting from this value if the preferred port is occupied.

configLOG_LEVEL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/figma-console-mcp-1syafm)](https://m8ven.ai/mcp/figma-console-mcp-1syafm)

commit: 77528d06ef307e3420c72a3c70214d1f3677b5d8

code hash: 31f9817126d40b578ec3989d6542d6fd706edfb27bcba897192c43168df052dd

verified: 5/29/2026, 11:35:59 AM

view raw JSON →