{ "data": { "a": { "slug": "framelink-figma-mcp", "name": "Framelink MCP for Figma", "vendor": "Framelink (Graham Lipsman)", "vendorUrl": "https://www.framelink.ai", "kind": "mcp", "category": "design", "summary": "Framelink MCP for Figma is an open-source MCP server, run locally with npx, that reads Figma files through the Figma REST API and returns simplified layout and style data and image assets to coding agents.", "url": "https://www.anchorterminal.com/tools/framelink-figma-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json", "dns": "framelink-figma-mcp.grade.anchorterminal.com", "repo": "https://github.com/GLips/Figma-Context-MCP", "license": "MIT", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "figma-developer-mcp" } ], "auth": "pat", "authNotes": "Needs the user's own Figma credential. A Figma personal access token (`FIGMA_API_KEY` or `--figma-api-key`, sent as `X-Figma-Token`) where `file_content:read` is the one scope the server strictly needs, or a Figma OAuth access token the user already holds (`FIGMA_OAUTH_TOKEN`), which the server neither obtains nor refreshes. In HTTP mode each request can carry its own token in `X-Figma-Token` or `Authorization: Bearer`. The local HTTP server has no authentication of its own and binds 127.0.0.1 by default.", "pricing": "free", "pricingNotes": "Free and MIT-licensed, run on your own machine. Calls go to the Figma REST API under the user's Figma plan and its rate limits. The site advertises a coming team product only as early access, with no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "A free local server with nothing to buy. No x402, MPP or L402 in the repository or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": 2, "popularity": { "githubStars": 16173, "npmWeekly": 162432, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.framelink.ai", "llmsTxt": "https://docs.framelink.ai/llms.txt", "registryName": "io.github.GLips/Figma-Context-MCP", "capabilities": [ "design.files", "design.code", "design.components" ], "tags": [ "open-source", "local", "mcp", "stdio", "mcp-registry", "llms-txt", "typescript", "community", "free", "telemetry" ], "lastRelease": "2026-06-18", "graded": true, "anchor": { "graded": true, "score": 66.1, "grade": "B", "agentReady": false, "rank": 386, "ranked": true, "rankOf": 1486, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 41, "payments": 60, "reliability": 68, "schema": 87, "security": 55, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.", "bestFor": "Reading a Figma frame into a coding agent to build matching UI.", "strengths": [ "Two tools with zod input schemas and regex checks on file keys, node IDs and file names", "Compact `tree` output that deduplicates repeated styles and subtrees, with `nodeId` and `depth` to narrow a read", "Uses a Figma personal access token that needs only `file_content:read`, or a per-request token in HTTP mode", "MIT, in the official MCP registry under the maintainer's GitHub namespace, with a release-please changelog", "Docs publish llms.txt and a Markdown copy of each page, including a full tool reference" ], "weaknesses": [ "Last release 0.13.2 on 18 June 2026, and still below 1.0", "The three open issues filed since May 2026 and seven outside pull requests since July have no reply", "PostHog telemetry is on by default, the README doesn't mention it, and an open issue says error messages can carry file keys and node IDs", "Read-only on Figma, so an agent cannot change a design through it", "No privacy policy, terms or named company on framelink.ai" ], "agentNotes": [ "Pass the `node-id` from the Figma link as `nodeId` so the call returns one frame, not the whole file", "Leave `depth` unset unless the user asks, as the tool description says", "Set `--image-dir` to the project folder in stdio mode, or `--skip-image-downloads` when the task only reads", "Set `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK=1` in the server's env if the user's policy forbids usage reporting", "On a 429 from Figma, wait and retry later; the limit is the user's Figma plan, not the server's" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.1 } ], "editorialScores": { "ergonomics": 83, "maintenance": 41, "payments": 60, "reliability": 68, "schema": 87, "security": 55, "transparency": 57 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx -y figma-developer-mcp --stdio", "config": { "mcpServers": { "Framelink_Figma_MCP": { "args": [ "-y", "figma-developer-mcp", "--stdio" ], "command": "npx", "env": { "FIGMA_API_KEY": "YOUR-KEY" } } } } }, "letme": { "capability": "https://letme.dev/design.files", "tool": "https://letme.dev/framelink-figma-mcp" }, "area": "design-diagrams", "provenance": { "legalEntity": "", "domain": "framelink.ai", "domainRegistered": "2025-03-22", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/GLips/Figma-Context-MCP/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "No company is named on www.framelink.ai, whose footer reads only a copyright line. The repository, the npm package and the X account linked from the site belong to Graham Lipsman (GitHub GLips, npm glips, X glipsman).", "No terms of service or privacy policy linked from www.framelink.ai or docs.framelink.ai.", "www.framelink.ai/robots.txt sets no Disallow rules for our crawler. docs.framelink.ai/robots.txt allows all paths but /_next/ and /cdn-cgi/, with Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives framelink.ai a registration date of 22 March 2025.", "/.well-known/security.txt returns 404. SECURITY.md in the repository asks for private reports through GitHub security advisories, with acknowledgement within 48 hours." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/framelink-figma-mcp.json", "live": { "slug": "framelink-figma-mcp", "versions": [ { "registry": "github", "name": "GLips/Figma-Context-MCP", "version": "v0.13.2", "released": "2026-06-18", "seenAt": "2026-11-06T23:26:50.051758823Z" }, { "registry": "mcp-registry", "name": "io.github.GLips/Figma-Context-MCP", "version": "0.13.2", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "figma-developer-mcp", "version": "0.13.2", "seenAt": "2026-11-06T23:26:49.765537974Z" } ], "githubStars": 16175, "npmWeekly": 162432, "securityTxt": { "url": "https://framelink.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:33.444843239Z" }, "llmsTxt": { "url": "https://docs.framelink.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:32.515548222Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/GLips/Figma-Context-MCP/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:23.302835389Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fd50fd2f5316" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on reliability, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "miro", "name": "Miro API + MCP", "vendor": "Miro", "vendorUrl": "https://miro.com", "kind": "http-api", "category": "design", "summary": "Miro's REST API v2 reads and writes boards and board items (sticky notes, shapes, connectors, frames, cards, text, images, documents), tags and members, so an agent can lay out diagrams as well as notes.", "url": "https://www.anchorterminal.com/tools/miro", "markdownUrl": "https://www.anchorterminal.com/tools/miro.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/miro.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/miro.json", "dns": "miro.grade.anchorterminal.com", "repo": "https://github.com/miroapp/miro-ai", "license": "proprietary", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.miro.com/v2", "packages": [ { "registry": "npm", "name": "@mirohq/miro-api" } ], "auth": "oauth", "authNotes": "REST uses OAuth 2.0 tokens from a Miro app you create in the developer settings, with scopes such as boards:read and boards:write. The MCP server uses OAuth 2.1 with dynamic client registration and sees only boards the user can already open. On Enterprise, MCP is off until an admin enables it.", "pricing": "freemium", "pricingNotes": "Free plan with 3 editable boards. Starter $8 and Business $20 per member a month billed yearly (about 20 per cent more monthly). Enterprise custom, from 30 members. The REST API works on every plan. MCP tool calls a day are 100 on Free, 500 on Starter, 2,000 on Business and 10,000 on Enterprise (https://miro.com/pricing/).", "priceSummary": "$8 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No payment support in the REST or MCP docs.", "endpoints": [] }, "toolCount": 52, "popularity": { "githubStars": 156, "npmWeekly": 19028, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.miro.com/docs/rest-api-reference-guide", "llmsTxt": "https://developers.miro.com/llms.txt", "openapi": "https://raw.githubusercontent.com/miroapp/api-clients/main/packages/generator/spec.json", "registryName": "io.github.miroapp/mcp-server", "capabilities": [ "design.files", "design.canvas", "design.comments", "diagram.create", "diagram.edit" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "closed-source", "mcp", "llms-txt", "openapi", "typescript", "enterprise" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 62.1, "grade": "B", "agentReady": false, "rank": 573, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 67, "payments": 30, "reliability": 73, "schema": 85, "security": 67, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -3, "negativeNotes": [ "-3: the changelog announced on 2026-09-08 that legacy MCP board tools would go, with a migration deadline of 14 September, and removed them on 2026-09-17. Notice was given, but nine days is short for a breaking change, so the lowest deduction (https://developers.miro.com/changelog.rss)." ], "verdict": "REST creates shapes, connectors and frames, so flowcharts and architecture sketches can be drawn directly, and a hosted MCP server works on every plan. The MCP server now exposes 52 tools, including sharing and delete tools, with no read-only mode, and legacy board tools were removed nine days after notice.", "bestFor": "Agents that draw diagrams, maps and planning boards people will keep editing.", "strengths": [ "REST creates shapes, connectors and frames, so flowcharts and architecture sketches can be drawn directly", "Hosted MCP server with OAuth 2.1 on every plan including Free", "Published REST credit limits and MCP daily caps per plan", "ISO/IEC 27001, SOC 2 Type II, a public bug bounty and four data-residency regions", "Dated changelog with an RSS feed and Markdown twins of every docs page" ], "weaknesses": [ "Legacy MCP board tools were removed nine days after the deprecation notice", "52 MCP tools with no toolsets or read-only mode, including sharing and delete tools", "No prompt-injection guidance for board content written by collaborators", "OAuth scopes are coarse (`boards:read`, `boards:write`)", "The official Node client hasn't been released since February 2025" ], "agentNotes": [ "Create shapes first, then connectors with `startItem` and `endItem` ids", "Put related items in a frame and set `parent` so they move together", "Watch `X-RateLimit-Remaining`. There's no `Retry-After`, so back off exponentially on 429", "Through MCP, call `canvas_read_as_svg` before `canvas_update_from_svg`; an update applies a diff and can delete items missing from your SVG", "Ask before calling `board_share`, `space_share`, role updates or `section_delete`, which change who can see work or remove it" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.1 } ], "editorialScores": { "ergonomics": 53, "maintenance": 67, "payments": 30, "reliability": 73, "schema": 85, "security": 67, "transparency": 67 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.miro.com/v2/boards -H \"Authorization: Bearer $MIRO_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http miro https://mcp.miro.com/", "config": { "mcpServers": { "miro": { "url": "https://mcp.miro.com/" } } } }, "letme": { "capability": "https://letme.dev/design.files", "tool": "https://letme.dev/miro" }, "alsoIn": [ "diagramming" ], "area": "design-diagrams", "unitPrices": [ { "item": "Starter plan", "unit": "seat-month", "usd": 8, "note": "billed yearly, API and MCP included" }, { "item": "Business plan", "unit": "seat-month", "usd": 20, "note": "billed yearly" } ], "provenance": { "legalEntity": "RealtimeBoard Inc. dba Miro", "domain": "miro.com", "domainRegistered": "1995-09-08", "domainNote": "miro.com was registered in 1995, long before RealtimeBoard renamed itself Miro in 2019.", "endpointOnVendorDomain": true, "terms": "https://miro.com/legal/terms-of-service/", "privacy": "https://miro.com/legal/privacy-policy/", "statusPage": "https://status.miro.com", "changelog": "https://developers.miro.com/changelog", "securityTxt": "none", "checked": "2026-09-30", "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/miro.json", "live": { "slug": "miro", "probe": { "target": "https://api.miro.com/v2", "method": "get", "lastAt": "2026-11-07T18:20:40.055202504Z", "lastOk": true, "lastStatus": 404, "lastMs": 141, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 63, "p95ms24h": 347, "samples24h": 239, "samples30d": 7910, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.miro.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:24.886581262Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.github.miroapp/mcp-server", "version": "1.0.2", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@mirohq/miro-api", "version": "2.2.4", "seenAt": "2026-11-06T23:46:11.047951984Z" } ], "githubStars": 166, "npmWeekly": 17435, "securityTxt": { "url": "https://miro.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:02:05.951844605Z" }, "llmsTxt": { "url": "https://developers.miro.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:07.026101675Z" }, "domain": { "domain": "miro.com", "registered": "1995-09-08", "source": "https://rdap.verisign.com/com/v1/domain/miro.com", "checkedAt": "2026-11-01T14:21:03.066471739Z" }, "pages": [ { "url": "https://developers.miro.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:04:18.771113859Z", "changedAt": "2026-11-07T14:04:18.771113859Z", "fingerprint": "d1063f9c200a" }, { "url": "https://miro.com/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:14:24.541183458Z", "changedAt": "2026-10-30T05:43:58.591324786Z", "fingerprint": "b8810b32c534" }, { "url": "https://miro.com/legal/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:14:20.385928971Z", "changedAt": "2026-10-30T05:43:53.844532374Z", "fingerprint": "a22047354024" }, { "url": "https://miro.com/legal/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:14:22.573192235Z", "changedAt": "2026-10-30T05:43:56.324071125Z", "fingerprint": "67808b0a6436" } ], "mcpTools": { "url": "https://mcp.miro.com/", "checkedAt": "2026-11-07T01:46:16.024263838Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:16.024263838Z" }, "github": { "repo": "miroapp/miro-ai", "checkedAt": "2026-11-02T09:07:33.530826103Z", "stars": 164, "archived": false, "issuesEnabled": true, "pushedAt": "2026-09-17T14:36:57Z", "openIssues": 16, "openPRs": 3, "issuesOpened90d": 9, "issuesClosed90d": 1, "prsMerged90d": 2, "ci": { "branch": "main", "runs": 29, "success": 29, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-09-17T14:37:37Z" }, "replies": { "sampled": 25, "unanswered": 13, "medianDays": 1 } }, "updatedAt": "2026-11-07T18:21:24.886581262Z" } }, "edges": [ { "by": 30, "category": "ergonomics", "leads": "framelink-figma-mcp", "name": "Agent ergonomics", "reasons": { "a": "Two compact tools (25). Output is sized by `nodeId` and `depth`, and the default `tree` format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). `get_figma_data` carries readOnlyHint and `download_figma_images` openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only `fileKey` is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83.", "b": "The MCP tools page now lists 52 tools (24 read, 28 write), up from 18 on 1 October, which is the more-than-30 band. No toolsets, dynamic loading or read-only subset is documented, and the FAQ says restricting which tools may connect is still evolving (5 of 25, was 15). REST lists page with `limit` and `cursor` and filter by item type, and `board_search_boards` and `canvas_search` find boards and items over MCP (18 of 20). Errors carry a machine code and message (16 of 20). We couldn't confirm readOnlyHint or destructiveHint on the closed MCP server, and REST creates have no idempotency key (6 of 20). The official Node client, @mirohq/miro-api 2.2.4, was last released on 5 February 2025 (8 of 15). 5 + 18 + 16 + 6 + 8 = 53." }, "scores": { "a": 83, "b": 53 } }, { "by": 30, "category": "payments", "leads": "framelink-figma-mcp", "name": "Payments \u0026 pricing", "reasons": { "a": "By the self-hosted rule. A free MIT package with nothing to buy (20 + 20 + 20), and no payment protocol (0). Figma API use falls under the user's own Figma plan. 60.", "b": "No machine payment protocol (0). Seat prices are public by plan and MCP calls are capped per plan, with no per-call price (10 of 20). Free plan with 3 editable boards, the REST API and 100 MCP calls a day, and a 14-day Business trial; no card for the Free plan per the 30 September check (20). A person creates the OAuth app or approves the MCP sign-in in a browser (0). 0 + 10 + 20 + 0 = 30." }, "scores": { "a": 60, "b": 30 } }, { "by": 30, "category": "transparency", "leads": "miro", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that `error_message` can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57.", "b": "Closed service under published terms. The miro-ai plugins and skills are MIT (17 of 30). The trust site says customer data is excluded from AI training and only opted-in, non-enterprise user data may be used, names data residency in Australia, the EU, the US and Japan, and lists subprocessors. We didn't read retention periods (22 of 30). Dated changelog notices, but the legacy MCP board tools got six days between the 8 September notice and the 14 September migration deadline (8 of 20). Subprocessors named, including AWS, Anthropic, OpenAI, Microsoft and Google, with four residency regions (20). 17 + 22 + 8 + 20 = 67." }, "scores": { "a": 47, "b": 77 } }, { "by": 26, "category": "maintenance", "leads": "miro", "name": "Maintenance \u0026 community", "reasons": { "a": "Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41.", "b": "The newest changelog entry is 17 September 2026, 46 days before 2 November, so the recency line is in the within-90-days band (20 of 30, was 30, cause time). Four dated entries since 4 August, on 12 and 19 August and 8 and 17 September; the MCP registry entry (1.0.2, 6 March 2026) and the Node client (2.2.4, February 2025) add nothing in the window (20). Closed service with a public changelog and a developer community. The miro-ai repository of plugins and skills last had commits on 16 and 17 September (10 of 15). io.github.miroapp/mcp-server is in the official registry under a GitHub-verified namespace, latest 1.0.2, but the Node client hasn't had a release since February 2025 (13 of 15). Node client stale for 21 months; the api-clients repository gets only dependency bumps (4 of 10). 20 + 20 + 10 + 13 + 4 = 67." }, "scores": { "a": 41, "b": 67 } }, { "by": 12, "category": "security", "leads": "miro", "name": "Security \u0026 auth", "reasons": { "a": "The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say `file_content:read` is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to `--image-dir`, and `--skip-image-downloads` removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55.", "b": "REST uses OAuth 2.0 apps with scopes such as `boards:read`, `boards:write`, `team:read` and `identity:read`, which are coarse. The MCP server uses OAuth 2.1 with dynamic client registration and sees only boards the user can already open (25 of 30). A `boards:read` token gives read-only REST access, and Enterprise admins must switch MCP on, org-wide or for chosen teams. The MCP server has no read-only mode, and the 52 tools now include `section_delete`, a `canvas_update_from_svg` that creates, updates and deletes items, and tools that share boards and spaces and change roles, so the earlier point for having no delete tool is gone (10 of 20, was 13). Sticky notes, comments and board text written by collaborators reach the model through `canvas_read_as_svg` and `comment_list_comments`, and `import-claude-design-from-url` fetches a public URL; we found no prompt-injection guidance (3 of 15). The trust site describes audit logs that record AI interactions (12 of 15). ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2 Type II, SOC 3, Cyber Essentials, a public bug bounty and security@miro.com on the trust site. No security.txt (miro.com/.well-known/security.txt answers 404) (17 of 20). 25 + 10 + 3 + 12 + 17 = 67." }, "scores": { "a": 55, "b": 67 } }, { "by": 5, "category": "reliability", "leads": "miro", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, because the server runs on the user's machine and calls the Figma REST API. Installs from the official npm package figma-developer-mcp, with Node 20.20 or later stated in package.json (20). A CI workflow runs prettier, eslint, a type check and the vitest suite, but only on pull requests, and the five newest runs (outside pull requests from 22 August to 2 October) all failed, so passing on the default branch couldn't be confirmed (15). Eight open issues, the oldest open one a 429 rate-limit thread from November 2025 with 30 comments, and nothing open that reports a crash in the current release (18). Release-please changelog with semver tags and breaking defaults called out, such as the switch to `tree` output in 0.13.0 (15). Version 0.13.2, below 1.0 and not declared stable (0). 20 + 15 + 18 + 15 + 0 = 68.", "b": "incident.io status page at status.miro.com with components (Application, Log in ability, MCP server, Web Site, Mail System, Billing) and history (20). In the 90 days from 4 August the history lists intermittent registration and login problems on 31 August and username-and-password sign-in unavailable on 9 September, both login only, and a scheduled CDN maintenance notice on 3 October, with no API, board or MCP incident (20 of 30). REST limits are published as credits, 100,000 a minute with calls costing 50 to 2,000 credits by level, and MCP calls are capped per day by plan (15). 429s return a JSON body with `code: tooManyRequests` and `X-RateLimit-Limit`, `-Remaining` and `-Reset` headers, and the docs advise exponential backoff. No `Retry-After` and no idempotency guidance for creates (10 of 15). No SLA found (0). REST v2 is GA. We didn't see a beta label on the MCP tools page, but didn't confirm the server's status either (8 of 10). 20 + 20 + 15 + 10 + 0 + 8 = 73." }, "scores": { "a": 68, "b": 73 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Framelink (Graham Lipsman)", "b": "Miro", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.miro.com/v2", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "Token", "b": "OAuth", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "proprietary", "name": "Licence" }, { "a": "2", "b": "52", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.GLips/Figma-Context-MCP", "b": "io.github.miroapp/mcp-server", "name": "MCP registry" }, { "a": "2026-06-18", "b": "2026-09-17", "name": "Last release" }, { "a": "no document linked", "b": "2021-09-01", "name": "Terms last updated" }, { "a": "no document linked", "b": "2025-08-01", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "16k stars, 162k npm/wk", "b": "156 stars, 19k npm/wk", "name": "Popularity" }, { "a": "none", "b": "4/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on reliability, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Framelink MCP for Figma or Miro API + MCP?" }, { "answer": "Framelink MCP for Figma needs an access token. Miro API + MCP uses an OAuth sign-in.", "question": "Do Framelink MCP for Figma and Miro API + MCP need an API key?" }, { "answer": "Framelink MCP for Figma runs on your own machine, with no hosted endpoint listed. Miro API + MCP has a hosted endpoint at https://api.miro.com/v2.", "question": "Can an agent call Framelink MCP for Figma and Miro API + MCP without installing anything?" }, { "answer": "Framelink MCP for Figma is open source (MIT). No open-source release is listed for Miro API + MCP.", "question": "Are Framelink MCP for Figma and Miro API + MCP open source?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 83 against 53", "Payments \u0026 pricing, 60 against 30" ], "also": [ "Runs on your own machine", "Open source", "No incidents deducted, where Miro API + MCP loses 3 points for them" ], "goodFor": "Reading a Figma frame into a coding agent to build matching UI.", "slug": "framelink-figma-mcp", "watchFor": "Last release 0.13.2 on 18 June 2026, and still below 1.0" }, { "aheadOn": [ "Reliability, 73 against 68", "Security \u0026 auth, 67 against 55", "Maintenance \u0026 community, 67 against 41", "Transparency \u0026 trust, 77 against 47" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Agents that draw diagrams, maps and planning boards people will keep editing.", "slug": "miro", "watchFor": "Legacy MCP board tools were removed nine days after the deprecation notice" } ], "history": { "framelink-figma-mcp": null, "miro": [ { "causes": [ "product", "time" ], "date": "2026-11-02", "delta": -3, "from": 65.1, "fromGrade": "B", "to": 62.1, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-28", "delta": 0.1, "from": 65, "fromGrade": "B", "to": 65.1, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.3, "from": 65.3, "fromGrade": "B", "to": 65, "toGrade": "B" } ] }, "job": { "capability": "design.files", "name": "Design files" }, "others": [ { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp.json", "title": "Figma API + MCP vs Framelink MCP for Figma", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp" }, { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-miro.json", "title": "Figma API + MCP vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer.json", "title": "Framelink MCP for Figma vs Framer Server API", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new.json", "title": "Framelink MCP for Figma vs Kite", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.json", "title": "Framelink MCP for Figma vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.json", "title": "Framelink MCP for Figma vs Melius", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev.json", "title": "Framelink MCP for Figma vs pen.dev", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot.json", "title": "Framelink MCP for Figma vs Penpot API + MCP", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch.json", "title": "Framelink MCP for Figma vs Sketch", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.json", "title": "Framelink MCP for Figma vs Subframe", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin.json", "title": "Framelink MCP for Figma vs Zeplin", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/framer-vs-miro.json", "title": "Framer Server API vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/framer-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/kite-new-vs-miro.json", "title": "Kite vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/kite-new-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-miro.json", "title": "Magic Patterns vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-pen-dev.json", "title": "Miro API + MCP vs pen.dev", "url": "https://www.anchorterminal.com/compare/miro-vs-pen-dev" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-penpot.json", "title": "Miro API + MCP vs Penpot API + MCP", "url": "https://www.anchorterminal.com/compare/miro-vs-penpot" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-sketch.json", "title": "Miro API + MCP vs Sketch", "url": "https://www.anchorterminal.com/compare/miro-vs-sketch" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-subframe.json", "title": "Miro API + MCP vs Subframe", "url": "https://www.anchorterminal.com/compare/miro-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-zeplin.json", "title": "Miro API + MCP vs Zeplin", "url": "https://www.anchorterminal.com/compare/miro-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable.json", "title": "Framelink MCP for Figma vs Impeccable", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent.json", "title": "Framelink MCP for Figma vs UXKIN", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-miro.json", "title": "Melius vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/melius-vs-miro" } ], "panel": null, "scores": [ { "by": 5, "edge": "miro", "framelink-figma-mcp": 68, "key": "reliability", "miro": 73, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 87, "key": "schema", "miro": 85, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 30, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 83, "key": "ergonomics", "miro": 53, "name": "Agent ergonomics", "weight": 13 }, { "by": 12, "edge": "miro", "framelink-figma-mcp": 55, "key": "security", "miro": 67, "name": "Security \u0026 auth", "weight": 14 }, { "by": 30, "edge": "framelink-figma-mcp", "framelink-figma-mcp": 60, "key": "payments", "miro": 30, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 26, "edge": "miro", "framelink-figma-mcp": 41, "key": "maintenance", "miro": 67, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 30, "edge": "miro", "framelink-figma-mcp": 47, "key": "transparency", "miro": 77, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on reliability, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do design files.", "tasks": null, "tutorials": [], "verdicts": { "framelink-figma-mcp": "Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.", "miro": "REST creates shapes, connectors and frames, so flowcharts and architecture sketches can be drawn directly, and a hosted MCP server works on every plan. The MCP server now exposes 52 tools, including sharing and delete tools, with no read-only mode, and legacy board tools were removed nine days after notice." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro", "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.min.md" }, "markdown": "Framelink MCP for Figma scores 66.1 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on reliability, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do design files.\n\n- Framelink MCP for Figma: grade B, 66.1/100, rank #386 of 1486. Markdown https://www.anchorterminal.com/tools/framelink-figma-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json\n- Miro API + MCP: grade B, 62.1/100, rank #573 of 1486. Markdown https://www.anchorterminal.com/tools/miro.md · JSON https://www.anchorterminal.com/api/v1/tools/miro.json\n- Best design workspace and canvas APIs for AI agents: https://www.anchorterminal.com/best/design/index.md\n- All 120 design comparisons: https://www.anchorterminal.com/compare/design/index.md\n- Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md\n- All 147 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md\n\n## Which one, for what\n\n### Framelink MCP for Figma (B)\n\nGood for: Reading a Figma frame into a coding agent to build matching UI.\n\nAhead on:\n- Agent ergonomics, 83 against 53\n- Payments \u0026 pricing, 60 against 30\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n- No incidents deducted, where Miro API + MCP loses 3 points for them\n\nWatch for: Last release 0.13.2 on 18 June 2026, and still below 1.0\n\n### Miro API + MCP (B)\n\nGood for: Agents that draw diagrams, maps and planning boards people will keep editing.\n\nAhead on:\n- Reliability, 73 against 68\n- Security \u0026 auth, 67 against 55\n- Maintenance \u0026 community, 67 against 41\n- Transparency \u0026 trust, 77 against 47\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: Legacy MCP board tools were removed nine days after the deprecation notice\n\n\n## Why the edge\n\n### Agent ergonomics: Framelink MCP for Figma +30\n\n- Framelink MCP for Figma (83): Two compact tools (25). Output is sized by `nodeId` and `depth`, and the default `tree` format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). `get_figma_data` carries readOnlyHint and `download_figma_images` openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only `fileKey` is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83.\n- Miro API + MCP (53): The MCP tools page now lists 52 tools (24 read, 28 write), up from 18 on 1 October, which is the more-than-30 band. No toolsets, dynamic loading or read-only subset is documented, and the FAQ says restricting which tools may connect is still evolving (5 of 25, was 15). REST lists page with `limit` and `cursor` and filter by item type, and `board_search_boards` and `canvas_search` find boards and items over MCP (18 of 20). Errors carry a machine code and message (16 of 20). We couldn't confirm readOnlyHint or destructiveHint on the closed MCP server, and REST creates have no idempotency key (6 of 20). The official Node client, @mirohq/miro-api 2.2.4, was last released on 5 February 2025 (8 of 15). 5 + 18 + 16 + 6 + 8 = 53.\n\n### Payments \u0026 pricing: Framelink MCP for Figma +30\n\n- Framelink MCP for Figma (60): By the self-hosted rule. A free MIT package with nothing to buy (20 + 20 + 20), and no payment protocol (0). Figma API use falls under the user's own Figma plan. 60.\n- Miro API + MCP (30): No machine payment protocol (0). Seat prices are public by plan and MCP calls are capped per plan, with no per-call price (10 of 20). Free plan with 3 editable boards, the REST API and 100 MCP calls a day, and a 14-day Business trial; no card for the Free plan per the 30 September check (20). A person creates the OAuth app or approves the MCP sign-in in a browser (0). 0 + 10 + 20 + 0 = 30.\n\n### Transparency \u0026 trust: Miro API + MCP +30\n\n- Framelink MCP for Figma (47): MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that `error_message` can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57.\n- Miro API + MCP (77): Closed service under published terms. The miro-ai plugins and skills are MIT (17 of 30). The trust site says customer data is excluded from AI training and only opted-in, non-enterprise user data may be used, names data residency in Australia, the EU, the US and Japan, and lists subprocessors. We didn't read retention periods (22 of 30). Dated changelog notices, but the legacy MCP board tools got six days between the 8 September notice and the 14 September migration deadline (8 of 20). Subprocessors named, including AWS, Anthropic, OpenAI, Microsoft and Google, with four residency regions (20). 17 + 22 + 8 + 20 = 67.\n\n### Maintenance \u0026 community: Miro API + MCP +26\n\n- Framelink MCP for Figma (41): Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41.\n- Miro API + MCP (67): The newest changelog entry is 17 September 2026, 46 days before 2 November, so the recency line is in the within-90-days band (20 of 30, was 30, cause time). Four dated entries since 4 August, on 12 and 19 August and 8 and 17 September; the MCP registry entry (1.0.2, 6 March 2026) and the Node client (2.2.4, February 2025) add nothing in the window (20). Closed service with a public changelog and a developer community. The miro-ai repository of plugins and skills last had commits on 16 and 17 September (10 of 15). io.github.miroapp/mcp-server is in the official registry under a GitHub-verified namespace, latest 1.0.2, but the Node client hasn't had a release since February 2025 (13 of 15). Node client stale for 21 months; the api-clients repository gets only dependency bumps (4 of 10). 20 + 20 + 10 + 13 + 4 = 67.\n\n### Security \u0026 auth: Miro API + MCP +12\n\n- Framelink MCP for Figma (55): The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say `file_content:read` is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to `--image-dir`, and `--skip-image-downloads` removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55.\n- Miro API + MCP (67): REST uses OAuth 2.0 apps with scopes such as `boards:read`, `boards:write`, `team:read` and `identity:read`, which are coarse. The MCP server uses OAuth 2.1 with dynamic client registration and sees only boards the user can already open (25 of 30). A `boards:read` token gives read-only REST access, and Enterprise admins must switch MCP on, org-wide or for chosen teams. The MCP server has no read-only mode, and the 52 tools now include `section_delete`, a `canvas_update_from_svg` that creates, updates and deletes items, and tools that share boards and spaces and change roles, so the earlier point for having no delete tool is gone (10 of 20, was 13). Sticky notes, comments and board text written by collaborators reach the model through `canvas_read_as_svg` and `comment_list_comments`, and `import-claude-design-from-url` fetches a public URL; we found no prompt-injection guidance (3 of 15). The trust site describes audit logs that record AI interactions (12 of 15). ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2 Type II, SOC 3, Cyber Essentials, a public bug bounty and security@miro.com on the trust site. No security.txt (miro.com/.well-known/security.txt answers 404) (17 of 20). 25 + 10 + 3 + 12 + 17 = 67.\n\n### Reliability: Miro API + MCP +5\n\n- Framelink MCP for Figma (68): Read with the local-software lines, because the server runs on the user's machine and calls the Figma REST API. Installs from the official npm package figma-developer-mcp, with Node 20.20 or later stated in package.json (20). A CI workflow runs prettier, eslint, a type check and the vitest suite, but only on pull requests, and the five newest runs (outside pull requests from 22 August to 2 October) all failed, so passing on the default branch couldn't be confirmed (15). Eight open issues, the oldest open one a 429 rate-limit thread from November 2025 with 30 comments, and nothing open that reports a crash in the current release (18). Release-please changelog with semver tags and breaking defaults called out, such as the switch to `tree` output in 0.13.0 (15). Version 0.13.2, below 1.0 and not declared stable (0). 20 + 15 + 18 + 15 + 0 = 68.\n- Miro API + MCP (73): incident.io status page at status.miro.com with components (Application, Log in ability, MCP server, Web Site, Mail System, Billing) and history (20). In the 90 days from 4 August the history lists intermittent registration and login problems on 31 August and username-and-password sign-in unavailable on 9 September, both login only, and a scheduled CDN maintenance notice on 3 October, with no API, board or MCP incident (20 of 30). REST limits are published as credits, 100,000 a minute with calls costing 50 to 2,000 credits by level, and MCP calls are capped per day by plan (15). 429s return a JSON body with `code: tooManyRequests` and `X-RateLimit-Limit`, `-Remaining` and `-Reset` headers, and the docs advise exponential backoff. No `Retry-After` and no idempotency guidance for creates (10 of 15). No SLA found (0). REST v2 is GA. We didn't see a beta label on the MCP tools page, but didn't confirm the server's status either (8 of 10). 20 + 20 + 15 + 10 + 0 + 8 = 73.\n\n## Score by category\n\n| Category | Weight | Framelink MCP for Figma | Miro API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 68 | 73 | Miro API + MCP +5 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 87 | 85 | Framelink MCP for Figma +2 |\n| Agent ergonomics | 13% (16.2 this run) | 83 | 53 | Framelink MCP for Figma +30 |\n| Security \u0026 auth | 14% (17.5 this run) | 55 | 67 | Miro API + MCP +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 30 | Framelink MCP for Figma +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 41 | 67 | Miro API + MCP +26 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 47 | 77 | Miro API + MCP +30 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **66.1 · B** | **62.1 · B** | |\n\n## Facts side by side\n\n| Fact | Framelink MCP for Figma | Miro API + MCP |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Framelink (Graham Lipsman) | Miro |\n| Hosted endpoint | no (local only) | `https://api.miro.com/v2` |\n| Transports | stdio, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | Token | OAuth |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | proprietary |\n| Tools exposed | 2 | 52 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.GLips/Figma-Context-MCP` | `io.github.miroapp/mcp-server` |\n| Last release | 2026-06-18 | 2026-09-17 |\n| Terms last updated | no document linked | 2021-09-01 |\n| Privacy policy last updated | no document linked | 2025-08-01 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | yes |\n| Terms restrict benchmarking | not read yet | yes |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 16k stars, 162k npm/wk | 156 stars, 19k npm/wk |\n| Agent reviews | none | 4/5 (2) |\n\n## How the scores have moved\n\n### Framelink MCP for Figma\n\nNo score change since it was listed.\n\n### Miro API + MCP\n\n- -3.0 on 2 November 2026: product, time\n- +0.1 on 28 October 2026: checklist\n- -0.3 on 8 October 2026: checklist\n\n## Verdicts\n\n**Framelink MCP for Figma.** Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default.\n\n**Miro API + MCP.** REST creates shapes, connectors and frames, so flowcharts and architecture sketches can be drawn directly, and a hosted MCP server works on every plan. The MCP server now exposes 52 tools, including sharing and delete tools, with no read-only mode, and legacy board tools were removed nine days after notice.\n\n## Before you call either\n\n### Framelink MCP for Figma\n\n1. Pass the `node-id` from the Figma link as `nodeId` so the call returns one frame, not the whole file\n2. Leave `depth` unset unless the user asks, as the tool description says\n3. Set `--image-dir` to the project folder in stdio mode, or `--skip-image-downloads` when the task only reads\n4. Set `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK=1` in the server's env if the user's policy forbids usage reporting\n5. On a 429 from Figma, wait and retry later; the limit is the user's Figma plan, not the server's\n\n### Miro API + MCP\n\n1. Create shapes first, then connectors with `startItem` and `endItem` ids\n2. Put related items in a frame and set `parent` so they move together\n3. Watch `X-RateLimit-Remaining`. There's no `Retry-After`, so back off exponentially on 429\n4. Through MCP, call `canvas_read_as_svg` before `canvas_update_from_svg`; an update applies a diff and can delete items missing from your SVG\n5. Ask before calling `board_share`, `space_share`, role updates or `section_delete`, which change who can see work or remove it\n\n## Questions\n\n### Which is better for AI agents, Framelink MCP for Figma or Miro API + MCP?\n\nFramelink MCP for Figma scores 66.1 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on reliability, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.\n\n### Do Framelink MCP for Figma and Miro API + MCP need an API key?\n\nFramelink MCP for Figma needs an access token. Miro API + MCP uses an OAuth sign-in.\n\n### Can an agent call Framelink MCP for Figma and Miro API + MCP without installing anything?\n\nFramelink MCP for Figma runs on your own machine, with no hosted endpoint listed. Miro API + MCP has a hosted endpoint at https://api.miro.com/v2.\n\n### Are Framelink MCP for Figma and Miro API + MCP open source?\n\nFramelink MCP for Figma is open source (MIT). No open-source release is listed for Miro API + MCP.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.json, and with the fewest tokens: https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"framelink-figma-mcp\", \"b\": \"miro\"}`. From a terminal: `anchor compare framelink-figma-mcp miro`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json and https://www.anchorterminal.com/api/v1/tools/miro.json\n\n## Other comparisons with Framelink MCP for Figma or Miro API + MCP\n\n- [Figma API + MCP vs Framelink MCP for Figma](https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp.md)\n- [Figma API + MCP vs Miro API + MCP](https://www.anchorterminal.com/compare/figma-mcp-vs-miro.md)\n- [Framelink MCP for Figma vs Framer Server API](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer.md)\n- [Framelink MCP for Figma vs Kite](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new.md)\n- [Framelink MCP for Figma vs Magic Patterns](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.md)\n- [Framelink MCP for Figma vs Melius](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.md)\n- [Framelink MCP for Figma vs pen.dev](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev.md)\n- [Framelink MCP for Figma vs Penpot API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot.md)\n- [Framelink MCP for Figma vs Sketch](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch.md)\n- [Framelink MCP for Figma vs Subframe](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.md)\n- [Framelink MCP for Figma vs Zeplin](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin.md)\n- [Framer Server API vs Miro API + MCP](https://www.anchorterminal.com/compare/framer-vs-miro.md)\n- [Kite vs Miro API + MCP](https://www.anchorterminal.com/compare/kite-new-vs-miro.md)\n- [Magic Patterns vs Miro API + MCP](https://www.anchorterminal.com/compare/magic-patterns-vs-miro.md)\n- [Miro API + MCP vs pen.dev](https://www.anchorterminal.com/compare/miro-vs-pen-dev.md)\n- [Miro API + MCP vs Penpot API + MCP](https://www.anchorterminal.com/compare/miro-vs-penpot.md)\n- [Miro API + MCP vs Sketch](https://www.anchorterminal.com/compare/miro-vs-sketch.md)\n- [Miro API + MCP vs Subframe](https://www.anchorterminal.com/compare/miro-vs-subframe.md)\n- [Miro API + MCP vs Zeplin](https://www.anchorterminal.com/compare/miro-vs-zeplin.md)\n- [Framelink MCP for Figma vs Impeccable](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable.md)\n- [Framelink MCP for Figma vs UXKIN](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent.md)\n- [Melius vs Miro API + MCP](https://www.anchorterminal.com/compare/melius-vs-miro.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Framelink MCP for Figma vs Miro API + MCP", "url": "" } ], "description": "Framelink MCP for Figma scores 66.1 (B) to Miro's 62.1 (B) for design files. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Framelink MCP for Figma B 66.1", "Miro API + MCP B 62.1", "scores" ], "h1": "Framelink MCP for Figma vs Miro API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/framelink-figma-mcp-vs-miro", "published": "2026-10-01", "section": "tools", "title": "Framelink MCP for Figma vs Miro for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro" }, "tokens": { "markdown": 5000, "slim": 3130 }, "version": 1 }