The most comprehensive MCP server for Figma — design tokens, variables, components, write tools, version history diff, accessibility audits, FigJam, Slides, and more. Local (WebSocket Desktop Bridge plugin) and Cloudflare Workers (paired + remote) modes.
- capability exposureinferred+35
- recent driftinferred+12
- inherited (deps)attested+15
- tool safetyinferred+25
- trust mitigatorsmixed−8
attestedinferredmixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 15m ago · see ecosystem CVEs →
no known CVEs for this server.
inherited (deps) · grade factor +15
- highdangerous code
dynamic exec: eval()
- highexfiltration combofigma_get_status
single tool reads + sends: fs, net
- highexfiltration combofigma_get_library_component_by_key
single tool reads + sends: fs, net
- highexfiltration combofigma_get_library_components
single tool reads + sends: fs, net
- highexfiltration combofigma_get_library_variables
single tool reads + sends: fs, net, db
analyzed v1.31.0 · analyzer v17 · 1d ago
danger signals1
- dynamic code executioneval()package/figma-desktop-bridge/code.js:326
codePromise = eval(wrappedCode);
- recent drift+12 capability drift →
[](https://mcpobservatory.com/servers/npm:figma-console-mcp/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of tpitre.