{ "data": { "a": { "slug": "framelink-figma-mcp", "name": "Framelink MCP for Figma", "vendor": "Framelink (Graham Lipsman)", "vendorUrl": "https://www.framelink.ai", "kind": "mcp", "category": "design", "summary": "Framelink MCP for Figma is an open-source MCP server, run locally with npx, that reads Figma files through the Figma REST API and returns simplified layout and style data and image assets to coding agents.", "url": "https://www.anchorterminal.com/tools/framelink-figma-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json", "dns": "framelink-figma-mcp.grade.anchorterminal.com", "repo": "https://github.com/GLips/Figma-Context-MCP", "license": "MIT", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "figma-developer-mcp" } ], "auth": "pat", "authNotes": "Needs the user's own Figma credential. A Figma personal access token (`FIGMA_API_KEY` or `--figma-api-key`, sent as `X-Figma-Token`) where `file_content:read` is the one scope the server strictly needs, or a Figma OAuth access token the user already holds (`FIGMA_OAUTH_TOKEN`), which the server neither obtains nor refreshes. In HTTP mode each request can carry its own token in `X-Figma-Token` or `Authorization: Bearer`. The local HTTP server has no authentication of its own and binds 127.0.0.1 by default.", "pricing": "free", "pricingNotes": "Free and MIT-licensed, run on your own machine. Calls go to the Figma REST API under the user's Figma plan and its rate limits. The site advertises a coming team product only as early access, with no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "A free local server with nothing to buy. No x402, MPP or L402 in the repository or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": 2, "popularity": { "githubStars": 16173, "npmWeekly": 162432, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.framelink.ai", "llmsTxt": "https://docs.framelink.ai/llms.txt", "registryName": "io.github.GLips/Figma-Context-MCP", "capabilities": [ "design.files", "design.code", "design.components" ], "tags": [ "open-source", "local", "mcp", "stdio", "mcp-registry", "llms-txt", "typescript", "community", "free", "telemetry" ], "lastRelease": "2026-06-18", "graded": true, "anchor": { "graded": true, "score": 66.1, "grade": "B", "agentReady": false, "rank": 387, "ranked": true, "rankOf": 1510, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 41, "payments": 60, "reliability": 68, "schema": 87, "security": 55, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.", "bestFor": "Reading a Figma frame into a coding agent to build matching UI.", "strengths": [ "Two tools with zod input schemas and regex checks on file keys, node IDs and file names", "Compact `tree` output that deduplicates repeated styles and subtrees, with `nodeId` and `depth` to narrow a read", "Uses a Figma personal access token that needs only `file_content:read`, or a per-request token in HTTP mode", "MIT, in the official MCP registry under the maintainer's GitHub namespace, with a release-please changelog", "Docs publish llms.txt and a Markdown copy of each page, including a full tool reference" ], "weaknesses": [ "Last release 0.13.2 on 18 June 2026, and still below 1.0", "The three open issues filed since May 2026 and seven outside pull requests since July have no reply", "PostHog telemetry is on by default, the README doesn't mention it, and an open issue says error messages can carry file keys and node IDs", "Read-only on Figma, so an agent cannot change a design through it", "No privacy policy, terms or named company on framelink.ai" ], "agentNotes": [ "Pass the `node-id` from the Figma link as `nodeId` so the call returns one frame, not the whole file", "Leave `depth` unset unless the user asks, as the tool description says", "Set `--image-dir` to the project folder in stdio mode, or `--skip-image-downloads` when the task only reads", "Set `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK=1` in the server's env if the user's policy forbids usage reporting", "On a 429 from Figma, wait and retry later; the limit is the user's Figma plan, not the server's" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.1 } ], "editorialScores": { "ergonomics": 83, "maintenance": 41, "payments": 60, "reliability": 68, "schema": 87, "security": 55, "transparency": 57 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx -y figma-developer-mcp --stdio", "config": { "mcpServers": { "Framelink_Figma_MCP": { "args": [ "-y", "figma-developer-mcp", "--stdio" ], "command": "npx", "env": { "FIGMA_API_KEY": "YOUR-KEY" } } } } }, "letme": { "capability": "https://letme.dev/design.files", "tool": "https://letme.dev/framelink-figma-mcp" }, "area": "design-diagrams", "provenance": { "legalEntity": "", "domain": "framelink.ai", "domainRegistered": "2025-03-22", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/GLips/Figma-Context-MCP/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "No company is named on www.framelink.ai, whose footer reads only a copyright line. The repository, the npm package and the X account linked from the site belong to Graham Lipsman (GitHub GLips, npm glips, X glipsman).", "No terms of service or privacy policy linked from www.framelink.ai or docs.framelink.ai.", "www.framelink.ai/robots.txt sets no Disallow rules for our crawler. docs.framelink.ai/robots.txt allows all paths but /_next/ and /cdn-cgi/, with Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives framelink.ai a registration date of 22 March 2025.", "/.well-known/security.txt returns 404. SECURITY.md in the repository asks for private reports through GitHub security advisories, with acknowledgement within 48 hours." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.json", "live": { "slug": "framelink-figma-mcp", "versions": [ { "registry": "github", "name": "GLips/Figma-Context-MCP", "version": "v0.13.2", "released": "2026-06-18", "seenAt": "2026-11-06T23:26:50.051758823Z" }, { "registry": "mcp-registry", "name": "io.github.GLips/Figma-Context-MCP", "version": "0.13.2", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "figma-developer-mcp", "version": "0.13.2", "seenAt": "2026-11-06T23:26:49.765537974Z" } ], "githubStars": 16175, "npmWeekly": 162432, "securityTxt": { "url": "https://framelink.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:33.444843239Z" }, "llmsTxt": { "url": "https://docs.framelink.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:32.515548222Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/GLips/Figma-Context-MCP/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:23.302835389Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fd50fd2f5316" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Melius's 53.3 (D), and leads in 4 of 7 scored categories. Melius leads on maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "melius", "name": "Melius", "vendor": "Melius AI, Inc.", "vendorUrl": "https://www.melius.com", "kind": "http-api", "category": "design", "summary": "Melius is a hosted node-based canvas for generating images, video, audio and text with many third-party models. Outside agents read and write projects, canvases, nodes, edges, runs and comments through a REST API, an MCP server and the mel CLI.", "url": "https://www.anchorterminal.com/tools/melius", "markdownUrl": "https://www.anchorterminal.com/tools/melius.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/melius.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/melius.json", "dns": "melius.grade.anchorterminal.com", "license": "Proprietary service under Melius's terms of service. The mel CLI on npm is MIT, with no public source repository found", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.melius.com/api/v1", "packages": [ { "registry": "npm", "name": "@melius-ai/cli" } ], "auth": "mixed", "authNotes": "A person creates an API key in the Melius app under Team settings, Integrations. The REST API, the CLI and the MCP endpoint at https://api.melius.com/mcp take it as a Bearer token, with an optional `x-team-id` header. The MCP endpoint at https://mcp.melius.com/mcp uses OAuth (authorisation code with S256 PKCE and dynamic client registration), where the user signs in, picks one team and Melius creates a connector key. Keys have no scopes. A key works with its creator's access and that user's role in each team. Access is self-serve, with no app review or sales approval.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with trial credits, amount not published. Creator $20 a month for 20,000 credits, Growth $50 for 50,000, Professional $110 for 110,000, Team $70 a seat for 70,000 pooled credits (2 to 10 seats), Enterprise custom. Annual billing cuts 15 to 20 per cent. API, CLI and MCP calls have no separate charge and generations draw team credits. Per-model credit costs come from an authenticated endpoint, not the pricing page. The page's comparison table shows different figures ($18, $45, $99+, $63). Whether Free teams can create API keys is not stated (https://www.melius.com/pricing, checked 2026-10-08).", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API, MCP or CLI docs, the OpenAPI spec or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 75, "popularity": { "githubStars": null, "npmWeekly": 9, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.melius.com", "llmsTxt": "https://docs.melius.com/llms.txt", "openapi": "https://docs.melius.com/api/openapi.json", "capabilities": [ "design.canvas", "design.comments", "design.files", "image.generate", "image.edit", "image.upscale", "video.generate", "speech.tts" ], "tags": [ "hosted", "freemium", "free-tier", "closed-source", "mcp", "oauth", "api-key", "openapi", "llms-txt", "cli", "async-jobs", "status-page", "pre-1.0" ], "lastRelease": "2026-09-10", "graded": true, "anchor": { "graded": true, "score": 53.3, "grade": "D", "agentReady": false, "rank": 954, "ranked": true, "rankOf": 1510, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 51, "maintenance": 56, "payments": 20, "reliability": 69, "schema": 70, "security": 43, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "One backend serves a 59-operation REST API with a public OpenAPI spec, a hosted MCP server with OAuth sign-in and a JSON-only CLI, and the status page showed no incidents from July to early October 2026. API keys carry no scopes and work with their creator's role, and no rate-limit numbers, changelog or per-model credit prices are published.", "bestFor": "An agent producing batches of ad creative, product images or short videos on a shared canvas that people then review, with many models behind one key.", "strengths": [ "Public OpenAPI 3.0.2 spec with 59 operations, plus llms.txt, llms-full.txt and a Markdown copy of every docs page", "Hosted MCP server with OAuth sign-in (PKCE, dynamic client registration) or a bearer API key, tied to one team chosen at authorisation", "429 responses carry `Retry-After` and `retryAfterSeconds`, and the docs give a bounded retry policy", "The mel CLI prints JSON only, uses six fixed exit codes and returns errors with a `code` and a `suggestion`", "status.melius.com listed no incidents for Web app or MCP from July to 8 October 2026" ], "weaknesses": [ "API keys have no scopes. A key works with its creator's role in every team the creator belongs to", "No rate-limit numbers, SLA, public changelog or API deprecation policy found in the reviewed documentation", "The MCP reference lists 75 tools, and the setup guide tells users to select Always Allow for all of them", "Per-model credit costs are returned by an authenticated endpoint and shown in the app, not on the pricing page", "No security.txt or disclosure policy found, and the Vanta trust centre at trust.melius.com needs JavaScript we couldn't run" ], "agentNotes": [ "Generate by creating a node on a canvas, starting a run with POST /nodes/{nodeId}/runs, then polling GET /node-runs/{nodeRunId} until `status` is finished or failed", "Over MCP, call `get_guide` first, `show_presence` before node changes and `canvas_plan_layout` before `bulk_create_nodes`", "On 429 wait `Retry-After` seconds. After a timeout or 5xx on a write, read the canvas or run state before resubmitting, because there are no idempotency keys", "Read credit costs from GET /generation/models?category=image before a bulk run. A 400 can mean the team is out of credits", "Downloads arrive as a ZIP from a signed URL. Fetch that URL without the `Authorization` header" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.3 } ], "editorialScores": { "ergonomics": 51, "maintenance": 56, "payments": 20, "reliability": 69, "schema": 70, "security": 43, "transparency": 38 }, "provenanceScore": 73, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @melius-ai/cli", "http": "curl -s -H \"Authorization: Bearer $MEL_API_KEY\" https://api.melius.com/api/v1/teams", "claudeCode": "claude mcp add melius --transport http https://mcp.melius.com/mcp --scope user", "config": { "mcpServers": { "melius": { "url": "https://mcp.melius.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/design.canvas", "tool": "https://letme.dev/melius" }, "area": "design-diagrams", "unitPrices": [ { "item": "Creator plan", "unit": "month", "usd": 20, "note": "20,000 credits a month, $17 a month on annual billing" }, { "item": "Growth plan", "unit": "month", "usd": 50, "note": "50,000 credits a month, $43 on annual billing" }, { "item": "Professional plan", "unit": "month", "usd": 110, "note": "110,000 credits a month, $93 on annual billing. A 300,000-credit option is also listed" }, { "item": "Team plan", "unit": "seat-month", "usd": 70, "note": "70,000 pooled credits a seat, 2 to 10 seats, $56 on annual billing" } ], "provenance": { "legalEntity": "Melius AI, Inc.", "domain": "melius.com", "domainRegistered": "1998-11-24", "endpointOnVendorDomain": true, "terms": "https://www.melius.com/terms", "privacy": "https://www.melius.com/privacy", "statusPage": "https://status.melius.com", "changelog": "", "securityTxt": "none", "checked": "2026-11-04", "notes": [ "The terms of service (effective 30 October 2026, read on 4 November) name Melius AI, Inc., 420 Lexington Avenue, New York, as the contracting party and are governed by Delaware law. They replace terms effective 28 August 2026.", "Section 7.3(d) of those terms bars using automated means (including bots, scrapers, or crawlers) to access the Service, defined as the Melius platform including www.melius.com and any related subdomains, so melius.com hosts were not read after the terms on 4 November.", "The API answers at api.melius.com, the OAuth MCP endpoint at mcp.melius.com and the docs at docs.melius.com, all melius.com subdomains.", "/.well-known/security.txt returned 404 on www.melius.com, docs.melius.com and api.melius.com on 8 October.", "RDAP for melius.com gave a registration date of 1998-11-24 on 8 October, which predates the company. The site says it is not affiliated with other organisations that share the Melius name.", "No public changelog was found. docs.melius.com/changelog and www.melius.com/changelog returned 404 on 8 October, and release dates come from npm.", "trust.melius.com is a Vanta trust centre that renders only with JavaScript, so its contents were not read." ], "score": 73 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/melius.json", "live": { "slug": "melius", "probe": { "target": "https://api.melius.com/api/v1", "method": "get", "lastAt": "2026-11-07T19:22:19.014116173Z", "lastOk": true, "lastStatus": 404, "lastMs": 427, "authRequired": false, "uptime24h": 100, "uptime30d": 99.97, "p50ms24h": 364, "p95ms24h": 486, "samples24h": 238, "samples30d": 7473, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 246 }, { "date": "2026-10-11", "probes": 247, "ok": 246 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.melius.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:27.579719708Z" }, "versions": [ { "registry": "npm", "name": "@melius-ai/cli", "version": "0.16.2", "seenAt": "2026-11-06T23:43:50.315024964Z" } ], "npmWeekly": 48, "securityTxt": { "url": "https://melius.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:41.601099823Z" }, "llmsTxt": { "url": "https://docs.melius.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:59.262970677Z" }, "domain": { "domain": "melius.com", "registered": "1998-11-24", "source": "https://rdap.verisign.com/com/v1/domain/melius.com", "checkedAt": "2026-11-01T14:20:37.07232315Z" }, "pages": [ { "url": "https://www.melius.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:31:29.815363633Z", "changedAt": "2026-11-06T13:52:05.411290744Z", "fingerprint": "36198850365b" }, { "url": "https://www.melius.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:31.906851011Z", "changedAt": "2026-11-06T13:52:07.73698785Z", "fingerprint": "5f9570fb0610" }, { "url": "https://www.melius.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:35.850607983Z", "changedAt": "2026-11-06T13:52:09.979247779Z", "fingerprint": "093288919adb" } ], "mcpTools": { "url": "https://mcp.melius.com/mcp", "checkedAt": "2026-11-07T01:46:13.192360875Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:13.192360875Z" }, "updatedAt": "2026-11-07T19:22:19.014116173Z" } }, "edges": [ { "by": 40, "category": "payments", "leads": "framelink-figma-mcp", "name": "Payments \u0026 pricing", "reasons": { "a": "By the self-hosted rule. A free MIT package with nothing to buy (20 + 20 + 20), and no payment protocol (0). Figma API use falls under the user's own Figma plan. 60.", "b": "No machine payment protocol (0). Plan prices and monthly credits are public, but per-model credit costs sit behind an authenticated endpoint and the top-up price is not published (10 of 20). A Free plan at $0 gives trial credits. The amount is not published and we couldn't confirm that sign-up needs no card (10 of 20). A person signs up in a browser and creates the first key in Team settings. POST /api-keys needs an existing key (0). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains." }, "scores": { "a": 60, "b": 20 } }, { "by": 32, "category": "ergonomics", "leads": "framelink-figma-mcp", "name": "Agent ergonomics", "reasons": { "a": "Two compact tools (25). Output is sized by `nodeId` and `depth`, and the default `tree` format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). `get_figma_data` carries readOnlyHint and `download_figma_images` openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only `fileKey` is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83.", "b": "The MCP reference lists 75 tools, in the over-30 band, with `get_guide` and `get_docs` loading guidance on demand and 18 Cast tools shown only to teams with access (10 of 25). Four list operations take `limit` and `offset` and three take `search`, canvas content can be narrowed to one node or to media summaries, and the CLI has `--fields` (14 of 20). REST errors carry `statusCode`, `error` and `message`, the CLI adds a `code` and a `suggestion`, and `CANVAS_TOO_LARGE` is documented as not worth retrying. A shortage of credits arrives as a plain 400 (14 of 20). No idempotency keys, and we couldn't read MCP annotations without an account. The docs do give safe-retry guidance (5 of 20). Auto model selection and defaults keep required fields few. There is no SDK library, only the CLI and generated code samples in six languages (8 of 15). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains." }, "scores": { "a": 83, "b": 51 } }, { "by": 17, "category": "schema", "leads": "framelink-figma-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "Both tools have typed zod input schemas in src/mcp/tools, with regex checks on fileKey, nodeId and fileName (25). docs.framelink.ai serves llms.txt and a Markdown copy of each page (10). The tool reference explains what each tool returns and how the two chain through `imageDownloadArguments`, and the `depth` parameter says not to use it unless the user asks. The `get_figma_data` description itself is one line and says nothing about when not to call it (14 of 20). Required fields and patterns are typed, and `fileName` must end in .png, .svg or .gif, with no enum for output format at call time (13 of 15). Config and request examples in the docs, a documented `Error fetching file:` prefix and purpose-built 403 and 429 messages, but no list of error cases (10 of 15). Semver releases and a public changelog (15). 25 + 10 + 14 + 13 + 10 + 15 = 87.", "b": "Public OpenAPI 3.0.2 spec with 59 operations (25). llms.txt, llms-full.txt and a Markdown copy of every docs page (10). 58 of the 59 operations have a summary and no description. The MCP reference gives each of 75 tools one line, with ordering rules for `get_guide`, `show_presence` and `canvas_plan_layout`, and the tool definitions themselves need a signed-in client, so we didn't read them (8 of 20). Request bodies are typed with 336 enums, ranges, UUID formats and required fields, with 52 open `additionalProperties` objects (13 of 15). 401, 403 and 429 are declared on every operation and 400, 404 and 409 where they apply, but the spec has no examples and most error bodies are a bare `message` (9 of 15). The path is versioned at /api/v1 and the CLI states semantic versioning. No public changelog found (5 of 15). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains." }, "scores": { "a": 87, "b": 70 } }, { "by": 15, "category": "maintenance", "leads": "melius", "name": "Maintenance \u0026 community", "reasons": { "a": "Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41.", "b": "The newest dated release is the CLI, 0.16.2 on 10 September 2026 per the 8 October npm reading, 55 days before this check. The vendor's Homebrew tap, whose bot tracks npm hourly, has no version after 0.16.2, and no other dated source could be read (20). Versions 0.15.0 to 0.16.2, eight in all, fall between 7 August and 10 September by the tap's bump commits, which match the 19 versions since 10 July in the 8 October npm reading (20). Closed service with no public changelog or issue tracker. Support is by email at support@melius.com and a Discord server linked from the site (5 of 15). There is no SDK library, though the CLI is on npm and Homebrew (5 of 15). The CLI has three dependencies, needs Node.js 20 and is published from GitHub Actions through npm trusted publishing. Its source is not public (6 of 10)." }, "scores": { "a": 41, "b": 56 } }, { "by": 12, "category": "security", "leads": "framelink-figma-mcp", "name": "Security \u0026 auth", "reasons": { "a": "The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say `file_content:read` is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to `--image-dir`, and `--skip-image-downloads` removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55.", "b": "API keys are revocable at once, can expire and are shown once, but have no scopes. A key works with its creator's access in every team that user belongs to, capped at the user's role. The MCP OAuth flow uses S256 PKCE and dynamic client registration, lists no scopes, and ties the connector key to one team (22 of 30). A key made by a viewer can only read, `bulk_delete_node` asks the user to confirm and a run can return a pending approval, but there is no read-only key and the setup guide tells users to select Always Allow for every tool (9 of 20). Canvas text, comments from collaborators and files fetched by `url_to_canvas` reach the model, and no prompt-injection guidance was found (2 of 15). Keys list a `lastUsedAt` time, connector keys are named after the client, and generation history is kept per member. No audit log is documented (7 of 15). No security.txt, disclosure policy or bug bounty found. A Vanta trust centre exists at trust.melius.com but needs JavaScript, so certifications are unchecked (3 of 20). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains." }, "scores": { "a": 55, "b": 43 } }, { "by": 9, "category": "transparency", "leads": "melius", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that `error_message` can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57.", "b": "Closed service under terms effective 30 October 2026, read on 4 November, which name Melius AI, Inc. and Delaware law. The CLI package is MIT with no public repository (15 of 30). The new terms (section 5.6, no training of models on user input or outputs), the privacy policy and the pricing FAQ agree that user input and outputs are not used to train models, and say third-party model providers process content under their own terms without a guarantee from Melius. Retention is described as a reasonable period with no numbers, and no DPA was found (14 of 30). Deprecated models keep working for an unstated grace period with an in-app warning. No API deprecation policy found (5 of 20). No sub-processor list or hosting location found beyond a statement that data is processed in the United States (4 of 20). The privacy policy, deprecation and sub-processor readings are per the 8 October check, not re-read on 4 November." }, "scores": { "a": 47, "b": 56 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Framelink (Graham Lipsman)", "b": "Melius AI, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.melius.com/api/v1", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "Token", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary service under Melius's terms of service. The mel CLI on npm is MIT, with no public source repository found", "name": "Licence" }, { "a": "2", "b": "75", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.GLips/Figma-Context-MCP", "b": "not listed", "name": "MCP registry" }, { "a": "2026-06-18", "b": "2026-09-10", "name": "Last release" }, { "a": "no document linked", "b": "no date given", "name": "Terms last updated" }, { "a": "no document linked", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "16k stars, 162k npm/wk", "b": "9 npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Melius's 53.3 (D), and leads in 4 of 7 scored categories. Melius leads on maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Framelink MCP for Figma or Melius?" }, { "answer": "Framelink MCP for Figma needs an access token. Melius takes an API key or an OAuth sign-in.", "question": "Do Framelink MCP for Figma and Melius need an API key?" }, { "answer": "Framelink MCP for Figma runs on your own machine, with no hosted endpoint listed. Melius has a hosted endpoint at https://api.melius.com/api/v1.", "question": "Can an agent call Framelink MCP for Figma and Melius without installing anything?" }, { "answer": "Framelink MCP for Figma is open source (MIT). No open-source release is listed for Melius.", "question": "Are Framelink MCP for Figma and Melius open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 87 against 70", "Agent ergonomics, 83 against 51", "Security \u0026 auth, 55 against 43", "Payments \u0026 pricing, 60 against 20" ], "also": [ "Runs on your own machine", "Open source" ], "goodFor": "Reading a Figma frame into a coding agent to build matching UI.", "slug": "framelink-figma-mcp", "watchFor": "Last release 0.13.2 on 18 June 2026, and still below 1.0" }, { "aheadOn": [ "Maintenance \u0026 community, 56 against 41", "Transparency \u0026 trust, 56 against 47" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "An agent producing batches of ad creative, product images or short videos on a shared canvas that people then review, with many models behind one key.", "slug": "melius", "watchFor": "API keys have no scopes. A key works with its creator's role in every team the creator belongs to" } ], "history": { "framelink-figma-mcp": null, "melius": [ { "causes": [ "time" ], "date": "2026-11-04", "delta": -0.9, "from": 54.2, "fromGrade": "C", "to": 53.3, "toGrade": "D" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 54.1, "fromGrade": "C", "to": 54.2, "toGrade": "C" } ] }, "job": { "capability": "design.files", "name": "Design files" }, "others": [ { "json": "https://www.anchorterminal.com/compare/artcraft-vs-melius.json", "title": "ArtCraft vs Melius", "url": "https://www.anchorterminal.com/compare/artcraft-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp.json", "title": "Figma API + MCP vs Framelink MCP for Figma", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp" }, { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-melius.json", "title": "Figma API + MCP vs Melius", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer.json", "title": "Framelink MCP for Figma vs Framer Server API", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new.json", "title": "Framelink MCP for Figma vs Kite", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.json", "title": "Framelink MCP for Figma vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.json", "title": "Framelink MCP for Figma vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev.json", "title": "Framelink MCP for Figma vs pen.dev", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot.json", "title": "Framelink MCP for Figma vs Penpot API + MCP", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch.json", "title": "Framelink MCP for Figma vs Sketch", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.json", "title": "Framelink MCP for Figma vs Subframe", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin.json", "title": "Framelink MCP for Figma vs Zeplin", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/framer-vs-melius.json", "title": "Framer Server API vs Melius", "url": "https://www.anchorterminal.com/compare/framer-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/kite-new-vs-melius.json", "title": "Kite vs Melius", "url": "https://www.anchorterminal.com/compare/kite-new-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-zeplin.json", "title": "Melius vs Zeplin", "url": "https://www.anchorterminal.com/compare/melius-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable.json", "title": "Framelink MCP for Figma vs Impeccable", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-ux-pilot-mcp.json", "title": "Framelink MCP for Figma vs UX Pilot MCP server", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-ux-pilot-mcp" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-melius.json", "title": "Magic Patterns vs Melius", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-miro.json", "title": "Melius vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/melius-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-pen-dev.json", "title": "Melius vs pen.dev", "url": "https://www.anchorterminal.com/compare/melius-vs-pen-dev" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-penpot.json", "title": "Melius vs Penpot API + MCP", "url": "https://www.anchorterminal.com/compare/melius-vs-penpot" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-sketch.json", "title": "Melius vs Sketch", "url": "https://www.anchorterminal.com/compare/melius-vs-sketch" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-subframe.json", "title": "Melius vs Subframe", "url": "https://www.anchorterminal.com/compare/melius-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-ux-pilot-mcp.json", "title": "Melius vs UX Pilot MCP server", "url": "https://www.anchorterminal.com/compare/melius-vs-ux-pilot-mcp" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent.json", "title": "Framelink MCP for Figma vs UXKIN", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent" } ], "panel": null, "scores": [ { "by": 1, "edge": "melius", "framelink-figma-mcp": 68, "key": "reliability", "melius": 69, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 17, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 87, "key": "schema", "melius": 70, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 32, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 83, "key": "ergonomics", "melius": 51, "name": "Agent ergonomics", "weight": 13 }, { "by": 12, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 55, "key": "security", "melius": 43, "name": "Security \u0026 auth", "weight": 14 }, { "by": 40, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 60, "key": "payments", "melius": 20, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 15, "edge": "melius", "framelink-figma-mcp": 41, "key": "maintenance", "melius": 56, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 9, "edge": "melius", "framelink-figma-mcp": 47, "key": "transparency", "melius": 56, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Melius's 53.3 (D), and leads in 4 of 7 scored categories. Melius leads on maintenance \u0026 community and transparency \u0026 trust. Both do design files.", "tasks": null, "tutorials": [], "verdicts": { "framelink-figma-mcp": "Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.", "melius": "One backend serves a 59-operation REST API with a public OpenAPI spec, a hosted MCP server with OAuth sign-in and a JSON-only CLI, and the status page showed no incidents from July to early October 2026. API keys carry no scopes and work with their creator's role, and no rate-limit numbers, changelog or per-model credit prices are published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius", "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.min.md" }, "markdown": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Melius's 53.3 (D), and leads in 4 of 7 scored categories. Melius leads on maintenance \u0026 community and transparency \u0026 trust. Both do design files.\n\n- Framelink MCP for Figma: grade B, 66.1/100, rank #387 of 1510. Markdown https://www.anchorterminal.com/tools/framelink-figma-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json\n- Melius: grade D, 53.3/100, rank #954 of 1510. Markdown https://www.anchorterminal.com/tools/melius.md · JSON https://www.anchorterminal.com/api/v1/tools/melius.json\n- Best design workspace and canvas APIs for AI agents: https://www.anchorterminal.com/best/design/index.md\n- All 133 design comparisons: https://www.anchorterminal.com/compare/design/index.md\n\n## Which one, for what\n\n### Framelink MCP for Figma (B)\n\nGood for: Reading a Figma frame into a coding agent to build matching UI.\n\nAhead on:\n- Schema \u0026 documentation, 87 against 70\n- Agent ergonomics, 83 against 51\n- Security \u0026 auth, 55 against 43\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n\nWatch for: Last release 0.13.2 on 18 June 2026, and still below 1.0\n\n### Melius (D)\n\nGood for: An agent producing batches of ad creative, product images or short videos on a shared canvas that people then review, with many models behind one key.\n\nAhead on:\n- Maintenance \u0026 community, 56 against 41\n- Transparency \u0026 trust, 56 against 47\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: API keys have no scopes. A key works with its creator's role in every team the creator belongs to\n\n\n## Why the edge\n\n### Payments \u0026 pricing: Framelink MCP for Figma +40\n\n- Framelink MCP for Figma (60): By the self-hosted rule. A free MIT package with nothing to buy (20 + 20 + 20), and no payment protocol (0). Figma API use falls under the user's own Figma plan. 60.\n- Melius (20): No machine payment protocol (0). Plan prices and monthly credits are public, but per-model credit costs sit behind an authenticated endpoint and the top-up price is not published (10 of 20). A Free plan at $0 gives trial credits. The amount is not published and we couldn't confirm that sign-up needs no card (10 of 20). A person signs up in a browser and creates the first key in Team settings. POST /api-keys needs an existing key (0). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains.\n\n### Agent ergonomics: Framelink MCP for Figma +32\n\n- Framelink MCP for Figma (83): Two compact tools (25). Output is sized by `nodeId` and `depth`, and the default `tree` format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). `get_figma_data` carries readOnlyHint and `download_figma_images` openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only `fileKey` is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83.\n- Melius (51): The MCP reference lists 75 tools, in the over-30 band, with `get_guide` and `get_docs` loading guidance on demand and 18 Cast tools shown only to teams with access (10 of 25). Four list operations take `limit` and `offset` and three take `search`, canvas content can be narrowed to one node or to media summaries, and the CLI has `--fields` (14 of 20). REST errors carry `statusCode`, `error` and `message`, the CLI adds a `code` and a `suggestion`, and `CANVAS_TOO_LARGE` is documented as not worth retrying. A shortage of credits arrives as a plain 400 (14 of 20). No idempotency keys, and we couldn't read MCP annotations without an account. The docs do give safe-retry guidance (5 of 20). Auto model selection and defaults keep required fields few. There is no SDK library, only the CLI and generated code samples in six languages (8 of 15). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains.\n\n### Schema \u0026 documentation: Framelink MCP for Figma +17\n\n- Framelink MCP for Figma (87): Both tools have typed zod input schemas in src/mcp/tools, with regex checks on fileKey, nodeId and fileName (25). docs.framelink.ai serves llms.txt and a Markdown copy of each page (10). The tool reference explains what each tool returns and how the two chain through `imageDownloadArguments`, and the `depth` parameter says not to use it unless the user asks. The `get_figma_data` description itself is one line and says nothing about when not to call it (14 of 20). Required fields and patterns are typed, and `fileName` must end in .png, .svg or .gif, with no enum for output format at call time (13 of 15). Config and request examples in the docs, a documented `Error fetching file:` prefix and purpose-built 403 and 429 messages, but no list of error cases (10 of 15). Semver releases and a public changelog (15). 25 + 10 + 14 + 13 + 10 + 15 = 87.\n- Melius (70): Public OpenAPI 3.0.2 spec with 59 operations (25). llms.txt, llms-full.txt and a Markdown copy of every docs page (10). 58 of the 59 operations have a summary and no description. The MCP reference gives each of 75 tools one line, with ordering rules for `get_guide`, `show_presence` and `canvas_plan_layout`, and the tool definitions themselves need a signed-in client, so we didn't read them (8 of 20). Request bodies are typed with 336 enums, ranges, UUID formats and required fields, with 52 open `additionalProperties` objects (13 of 15). 401, 403 and 429 are declared on every operation and 400, 404 and 409 where they apply, but the spec has no examples and most error bodies are a bare `message` (9 of 15). The path is versioned at /api/v1 and the CLI states semantic versioning. No public changelog found (5 of 15). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains.\n\n### Maintenance \u0026 community: Melius +15\n\n- Framelink MCP for Figma (41): Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41.\n- Melius (56): The newest dated release is the CLI, 0.16.2 on 10 September 2026 per the 8 October npm reading, 55 days before this check. The vendor's Homebrew tap, whose bot tracks npm hourly, has no version after 0.16.2, and no other dated source could be read (20). Versions 0.15.0 to 0.16.2, eight in all, fall between 7 August and 10 September by the tap's bump commits, which match the 19 versions since 10 July in the 8 October npm reading (20). Closed service with no public changelog or issue tracker. Support is by email at support@melius.com and a Discord server linked from the site (5 of 15). There is no SDK library, though the CLI is on npm and Homebrew (5 of 15). The CLI has three dependencies, needs Node.js 20 and is published from GitHub Actions through npm trusted publishing. Its source is not public (6 of 10).\n\n### Security \u0026 auth: Framelink MCP for Figma +12\n\n- Framelink MCP for Figma (55): The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say `file_content:read` is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to `--image-dir`, and `--skip-image-downloads` removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55.\n- Melius (43): API keys are revocable at once, can expire and are shown once, but have no scopes. A key works with its creator's access in every team that user belongs to, capped at the user's role. The MCP OAuth flow uses S256 PKCE and dynamic client registration, lists no scopes, and ties the connector key to one team (22 of 30). A key made by a viewer can only read, `bulk_delete_node` asks the user to confirm and a run can return a pending approval, but there is no read-only key and the setup guide tells users to select Always Allow for every tool (9 of 20). Canvas text, comments from collaborators and files fetched by `url_to_canvas` reach the model, and no prompt-injection guidance was found (2 of 15). Keys list a `lastUsedAt` time, connector keys are named after the client, and generation history is kept per member. No audit log is documented (7 of 15). No security.txt, disclosure policy or bug bounty found. A Vanta trust centre exists at trust.melius.com but needs JavaScript, so certifications are unchecked (3 of 20). Per the 8 October check, not re-read on 4 November, because the terms of 30 October 2026 bar automated access to melius.com and its subdomains.\n\n### Transparency \u0026 trust: Melius +9\n\n- Framelink MCP for Figma (47): MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that `error_message` can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57.\n- Melius (56): Closed service under terms effective 30 October 2026, read on 4 November, which name Melius AI, Inc. and Delaware law. The CLI package is MIT with no public repository (15 of 30). The new terms (section 5.6, no training of models on user input or outputs), the privacy policy and the pricing FAQ agree that user input and outputs are not used to train models, and say third-party model providers process content under their own terms without a guarantee from Melius. Retention is described as a reasonable period with no numbers, and no DPA was found (14 of 30). Deprecated models keep working for an unstated grace period with an in-app warning. No API deprecation policy found (5 of 20). No sub-processor list or hosting location found beyond a statement that data is processed in the United States (4 of 20). The privacy policy, deprecation and sub-processor readings are per the 8 October check, not re-read on 4 November.\n\n## Score by category\n\n| Category | Weight | Framelink MCP for Figma | Melius | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 68 | 69 | Melius +1 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 87 | 70 | Framelink MCP for Figma +17 |\n| Agent ergonomics | 13% (16.2 this run) | 83 | 51 | Framelink MCP for Figma +32 |\n| Security \u0026 auth | 14% (17.5 this run) | 55 | 43 | Framelink MCP for Figma +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 20 | Framelink MCP for Figma +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 41 | 56 | Melius +15 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 47 | 56 | Melius +9 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **66.1 · B** | **53.3 · D** | |\n\n## Facts side by side\n\n| Fact | Framelink MCP for Figma | Melius |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Framelink (Graham Lipsman) | Melius AI, Inc. |\n| Hosted endpoint | no (local only) | `https://api.melius.com/api/v1` |\n| Transports | stdio, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | Token | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | Proprietary service under Melius's terms of service. The mel CLI on npm is MIT, with no public source repository found |\n| Tools exposed | 2 | 75 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.GLips/Figma-Context-MCP` | not listed |\n| Last release | 2026-06-18 | 2026-09-10 |\n| Terms last updated | no document linked | no date given |\n| Privacy policy last updated | no document linked | no date given |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | yes |\n| Terms restrict benchmarking | not read yet | yes |\n| Terms or service can change without notice | not read yet | yes |\n| Arbitration or class-action waiver | not read yet | yes |\n| Popularity | 16k stars, 162k npm/wk | 9 npm/wk |\n\n## How the scores have moved\n\n### Framelink MCP for Figma\n\nNo score change since it was listed.\n\n### Melius\n\n- -0.9 on 4 November 2026 (C to D): time\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**Framelink MCP for Figma.** Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.\n\n**Melius.** One backend serves a 59-operation REST API with a public OpenAPI spec, a hosted MCP server with OAuth sign-in and a JSON-only CLI, and the status page showed no incidents from July to early October 2026. API keys carry no scopes and work with their creator's role, and no rate-limit numbers, changelog or per-model credit prices are published.\n\n## Before you call either\n\n### Framelink MCP for Figma\n\n1. Pass the `node-id` from the Figma link as `nodeId` so the call returns one frame, not the whole file\n2. Leave `depth` unset unless the user asks, as the tool description says\n3. Set `--image-dir` to the project folder in stdio mode, or `--skip-image-downloads` when the task only reads\n4. Set `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK=1` in the server's env if the user's policy forbids usage reporting\n5. On a 429 from Figma, wait and retry later; the limit is the user's Figma plan, not the server's\n\n### Melius\n\n1. Generate by creating a node on a canvas, starting a run with POST /nodes/{nodeId}/runs, then polling GET /node-runs/{nodeRunId} until `status` is finished or failed\n2. Over MCP, call `get_guide` first, `show_presence` before node changes and `canvas_plan_layout` before `bulk_create_nodes`\n3. On 429 wait `Retry-After` seconds. After a timeout or 5xx on a write, read the canvas or run state before resubmitting, because there are no idempotency keys\n4. Read credit costs from GET /generation/models?category=image before a bulk run. A 400 can mean the team is out of credits\n5. Downloads arrive as a ZIP from a signed URL. Fetch that URL without the `Authorization` header\n\n## Questions\n\n### Which is better for AI agents, Framelink MCP for Figma or Melius?\n\nFramelink MCP for Figma scores 66.1 (B) on agent readiness against Melius's 53.3 (D), and leads in 4 of 7 scored categories. Melius leads on maintenance \u0026 community and transparency \u0026 trust.\n\n### Do Framelink MCP for Figma and Melius need an API key?\n\nFramelink MCP for Figma needs an access token. Melius takes an API key or an OAuth sign-in.\n\n### Can an agent call Framelink MCP for Figma and Melius without installing anything?\n\nFramelink MCP for Figma runs on your own machine, with no hosted endpoint listed. Melius has a hosted endpoint at https://api.melius.com/api/v1.\n\n### Are Framelink MCP for Figma and Melius open source?\n\nFramelink MCP for Figma is open source (MIT). No open-source release is listed for Melius.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.json, and with the fewest tokens: https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"framelink-figma-mcp\", \"b\": \"melius\"}`. From a terminal: `anchor compare framelink-figma-mcp melius`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json and https://www.anchorterminal.com/api/v1/tools/melius.json\n\n## Other comparisons with Framelink MCP for Figma or Melius\n\n- [ArtCraft vs Melius](https://www.anchorterminal.com/compare/artcraft-vs-melius.md)\n- [Figma API + MCP vs Framelink MCP for Figma](https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp.md)\n- [Figma API + MCP vs Melius](https://www.anchorterminal.com/compare/figma-mcp-vs-melius.md)\n- [Framelink MCP for Figma vs Framer Server API](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer.md)\n- [Framelink MCP for Figma vs Kite](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new.md)\n- [Framelink MCP for Figma vs Magic Patterns](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.md)\n- [Framelink MCP for Figma vs Miro API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.md)\n- [Framelink MCP for Figma vs pen.dev](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev.md)\n- [Framelink MCP for Figma vs Penpot API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot.md)\n- [Framelink MCP for Figma vs Sketch](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch.md)\n- [Framelink MCP for Figma vs Subframe](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.md)\n- [Framelink MCP for Figma vs Zeplin](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin.md)\n- [Framer Server API vs Melius](https://www.anchorterminal.com/compare/framer-vs-melius.md)\n- [Kite vs Melius](https://www.anchorterminal.com/compare/kite-new-vs-melius.md)\n- [Melius vs Zeplin](https://www.anchorterminal.com/compare/melius-vs-zeplin.md)\n- [Framelink MCP for Figma vs Impeccable](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable.md)\n- [Framelink MCP for Figma vs UX Pilot MCP server](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-ux-pilot-mcp.md)\n- [Magic Patterns vs Melius](https://www.anchorterminal.com/compare/magic-patterns-vs-melius.md)\n- [Melius vs Miro API + MCP](https://www.anchorterminal.com/compare/melius-vs-miro.md)\n- [Melius vs pen.dev](https://www.anchorterminal.com/compare/melius-vs-pen-dev.md)\n- [Melius vs Penpot API + MCP](https://www.anchorterminal.com/compare/melius-vs-penpot.md)\n- [Melius vs Sketch](https://www.anchorterminal.com/compare/melius-vs-sketch.md)\n- [Melius vs Subframe](https://www.anchorterminal.com/compare/melius-vs-subframe.md)\n- [Melius vs UX Pilot MCP server](https://www.anchorterminal.com/compare/melius-vs-ux-pilot-mcp.md)\n- [Framelink MCP for Figma vs UXKIN](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Framelink MCP for Figma vs Melius", "url": "" } ], "description": "Framelink MCP for Figma scores 66.1 (B) to Melius's 53.3 (D) for design files. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Framelink MCP for Figma B 66.1", "Melius D 53.3", "scores" ], "h1": "Framelink MCP for Figma vs Melius", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/framelink-figma-mcp-vs-melius", "published": "2026-10-01", "section": "tools", "title": "Framelink MCP for Figma vs Melius for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius" }, "tokens": { "markdown": 5200, "slim": 3280 }, "version": 1 }