Framelink MCP for Figma vs Impeccable

Framelink MCP for Figma 41

Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41.

Impeccable 79

skill-v4.8.0, cli-v4.8.0 and engine-v0.1.18 on 26 October 2026, six days before this check, with fixes merged on main through 1 November (30). Fourteen npm versions since 1 August and many more GitHub releases in the last 90 days (20). Sampled issues get maintainer replies within days, a PR Sheriff workflow triages pull requests, and 21 pull requests are open (20 of 25). No MCP server or library SDK, so the registry and SDK line doesn't apply. It ships through the Claude Code plugin marketplace, the VS Code Marketplace and the Chrome Web Store, which this line doesn't credit (0). Dependabot for bun and GitHub Actions, CI on push, and an audit script (9 of 10). Total 79.

Framelink MCP for Figma 47

MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that error_message can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57.

Impeccable 69

Apache-2.0 (30). The privacy page, updated 21 October 2026, says project checks run locally and upload no files or results. It lists what the version check, roll API and choice report send and keep (Cloudflare D1, Analytics Engine and R2, a keyed hash in place of the roll key, no fixed deletion date and no per-user deletion), and the website's Google Analytics and PostHog use. It agrees with the README and with crates/context/src/telemetry.rs. No DPA (24 of 30). Breaking changes are dated in the changelog, deprecated flags and the craft alias still work with a notice, but there's no written deprecation policy (10 of 20). Choice reporting is on by default and disclosed in the README and privacy page, with an opt-out by command, DO_NOT_TRACK, IMPECCABLE_NO_TELEMETRY or project config. The design-option request itself can't be turned off without a local catalogue (18 of 20). Total 82.

Framelink MCP for Figma 68

Read with the local-software lines, because the server runs on the user's machine and calls the Figma REST API. Installs from the official npm package figma-developer-mcp, with Node 20.20 or later stated in package.json (20). A CI workflow runs prettier, eslint, a type check and the vitest suite, but only on pull requests, and the five newest runs (outside pull requests from 22 August to 2 October) all failed, so passing on the default branch couldn't be confirmed (15). Eight open issues, the oldest open one a 429 rate-limit thread from November 2025 with 30 comments, and nothing open that reports a crash in the current release (18). Release-please changelog with semver tags and breaking defaults called out, such as the switch to tree output in 0.13.0 (15). Version 0.13.2, below 1.0 and not declared stable (0). 20 + 15 + 18 + 15 + 0 = 68.

Impeccable 85

Scored as a local package, since the owner runs it. Official npm package impeccable with Node 18.19 or later stated and engine binaries for macOS (arm64, x64), Linux (x64, arm64) and Windows x64 (20). CI runs on every push and pull request to main with core, detector, framework, Rust, Windows launcher and Node-floor jobs. The latest push run on main passed on 30 October 2026, while that morning's nightly scheduled run failed and we didn't read why, per the 30 October check, not re-read on 1 November because GitHub's pages and API refuse our reader (20 of 25). 29 open issues against 93 releases on 30 October, with recent bug reports on installer and hook edge cases, and 18 commits titled Fix merged to main between 28 October and 1 November, each naming its issue or pull request. Three sampled issues (#964, #1023, #1190) show replies from the maintainers within about two days (18 of 25). Separate skill, CLI and engine versions with a dated changelog that marks breaking changes, such as CLI 3.0.0 raising the Node minimum, but the engine every command runs is still 0.1.x (12 of 15). The package is 4.8.0 (15). Total 85.

Framelink MCP for Figma 83

Two compact tools (25). Output is sized by nodeId and depth, and the default tree format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). get_figma_data carries readOnlyHint and download_figma_images openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only fileKey is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83.

Impeccable 66

Read from source and docs, not from a run. The detector's JSON is one array per scan, but the skill costs context: SKILL.md is 12 KB, and each command loads its own reference of up to 63 KB from 46 files totalling 446 KB (12 of 25). --scope, --no-advisory, --quiet and single-file targets narrow output, with no limit or paging on findings (12 of 20). Exit codes separate findings (2) from scan failures (1), and each finding carries a rule id, line and snippet with a fix direction (17 of 20). A scan is read-only and safe to repeat. Live mode writes accepted variants back to source, and the installer stops before overwriting a malformed hook manifest (15 of 20). detect runs with no flags, but it's a CLI only, with no library SDK in any language (10 of 15). Total 66.

Framelink MCP for Figma 87

Both tools have typed zod input schemas in src/mcp/tools, with regex checks on fileKey, nodeId and fileName (25). docs.framelink.ai serves llms.txt and a Markdown copy of each page (10). The tool reference explains what each tool returns and how the two chain through imageDownloadArguments, and the depth parameter says not to use it unless the user asks. The get_figma_data description itself is one line and says nothing about when not to call it (14 of 20). Required fields and patterns are typed, and fileName must end in .png, .svg or .gif, with no enum for output format at call time (13 of 15). Config and request examples in the docs, a documented Error fetching file: prefix and purpose-built 403 and 429 messages, but no list of error cases (10 of 15). Semver releases and a public changelog (15). 25 + 10 + 14 + 13 + 10 + 15 = 87.

Impeccable 78

CLI reading of the API checklist. No JSON Schema for findings, but docs/CLI-CONTRACT.md fixes the finding fields, every flag, stdout and stderr, and exit codes, and --list-rules --json returns the catalogue as {id,name,category,severity,scopes,description} (12 of 25). llms.txt at impeccable.style and Markdown docs, SKILL.md and per-command references (10). The skill's description says when to use it and that it isn't for backend-only or non-UI tasks, and each of the 62 rules has its own description (17 of 20). Flags are validated (--scope against a fixed list, --viewport against WxH) with error messages that name the valid values, though most input is free paths (11 of 15). Help text and docs give examples, and the exit codes and error messages are documented verbatim (13 of 15). Versioned releases and a dated public changelog (15). Total 78.

Framelink MCP for Figma 55

The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say file_content:read is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to --image-dir, and --skip-image-downloads removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55.

Impeccable 50

Local software. The detector needs no credentials, and image generation reads an optional OPENAI_API_KEY from the environment, so the middle band (20). Scans are read-only and the installer asks before adding hooks, with --no-hooks to skip them. But the README says Claude Code runs installed hooks even when the model's own commands are denied, so the first edit can download the engine, and live mode runs the project's impeccable:manual-edit-validate script with the user's permissions. Both are written warnings, not approval steps (9 of 20). URL scans of any page return its text as finding snippets to the agent, and no prompt-injection guidance was found in SKILL.md or the CLI contract (4 of 15). An optional NDJSON hook audit log and telemetry status (7 of 15). Engine downloads are checked against SHA-256 digests shipped in the package and refused when missing, skill bundles carry Ed25519 signatures, and the Windows engine is Authenticode-signed. GitHub's private vulnerability reporting is on, but there's no SECURITY.md, security.txt or bounty, the Vanta trust centre couldn't be read (robots.txt), and the npm package is published from a personal account without provenance (10 of 20). Total 50.