# Framelink MCP for Figma > Framelink MCP for Figma is an open-source MCP server, run locally with npx, that reads Figma files through the Figma REST API and returns simplified layout and style data and image assets to coding agents. - Canonical: https://www.anchorterminal.com/tools/framelink-figma-mcp - Pricing: https://www.anchorterminal.com/tools/framelink-figma-mcp#pricing - Reviews: https://www.anchorterminal.com/tools/framelink-figma-mcp#reviews - Markdown: https://www.anchorterminal.com/tools/framelink-figma-mcp.md (~6,300 tokens) - Slim: https://www.anchorterminal.com/tools/framelink-figma-mcp.min.md (~1,380 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/framelink-figma-mcp.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key) - DNS: dig +short TXT framelink-figma-mcp.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.. and .vs.. under the zone, and the same under grade.letme.dev) - Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data) - Updated: 2026-11-07 ## Overview **Grade B · 66.1/100 · rank #386 of 1486 · #2 in Design workspaces & canvases · not agent-ready · confidence medium** ## Assessment Two compact, typed tools return Figma layout and styles in a token-saving tree format and save image assets, with a read-only hint and a flag that removes the writing tool. There has been no release since 18 June 2026, issues and outside pull requests since July have gone unanswered, and telemetry is on by default. ## Facts | Field | Value | | --- | --- | | Vendor | Framelink (Graham Lipsman) (https://www.framelink.ai) | | Kind | MCP server | | Category | Design workspaces & canvases (https://www.anchorterminal.com/categories/design) | | Transport | stdio, Streamable HTTP | | Auth | Token · Needs the user's own Figma credential. A Figma personal access token (`FIGMA_API_KEY` or `--figma-api-key`, sent as `X-Figma-Token`) where `file_content:read` is the one scope the server strictly needs, or a Figma OAuth access token the user already holds (`FIGMA_OAUTH_TOKEN`), which the server neither obtains nor refreshes. In HTTP mode each request can carry its own token in `X-Figma-Token` or `Authorization: Bearer`. The local HTTP server has no authentication of its own and binds 127.0.0.1 by default. | | Pricing | Free (Free · OSS) · Free and MIT-licensed, run on your own machine. Calls go to the Figma REST API under the user's Figma plan and its rate limits. The site advertises a coming team product only as early access, with no price. | | x402 | No · A free local server with nothing to buy. No x402, MPP or L402 in the repository or the docs (checked 2026-11-06). | | Licence | MIT | | Tools exposed | 2 | | Packages | npm: `figma-developer-mcp` | | MCP registry name | `io.github.GLips/Figma-Context-MCP` | | Source | https://github.com/GLips/Figma-Context-MCP | | Docs | https://docs.framelink.ai | | llms.txt | https://docs.framelink.ai/llms.txt | | Last release | 2026-06-18 | | GitHub stars | 16,173 (as of 2026-11-06) | | npm downloads / week | 162,432 | | Surface listed | The figma-developer-mcp package (0.13.2) and its source at github.com/GLips/Figma-Context-MCP, read from a shallow clone, the npm registry, docs.framelink.ai and www.framelink.ai on 6 November 2026. The package was not installed or run | | Tools | get_figma_data (fileKey required, nodeId and depth optional) and download_figma_images (fileKey and a nodes list with nodeId and fileName, writing PNG, SVG or GIF into the image directory) | | Output formats | tree (default, built for LLMs), yaml or json, set at startup with `--format` | | Other interfaces | A local HTTP server on port 3333 at /mcp, and a `fetch` CLI command that prints simplified design data without a server | | Telemetry | PostHog at us.i.posthog.com, one event per tool call with timing, response shape and errors, Figma credentials scrubbed. Off with `--no-telemetry`, `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK` | | Relation to Figma | A community server, not Figma's. Figma's own server is listed separately as figma-mcp | | Capabilities | design.files, design.code, design.components | | Tags | open-source, local, mcp, stdio, mcp-registry, llms-txt, typescript, community, free, telemetry | | JSON | https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp.json | ## Score breakdown (methodology v0.7, October 2026 research run) Assessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 68 | 13.6 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 87 | 14.1 | | Agent ergonomics | 13% | 16.2 | 83 | 13.5 | | Security & auth | 14% | 17.5 | 55 | 9.6 | | Payments & pricing | 10% | 12.5 | 60 | 7.5 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 41 | 3.6 | | Transparency & trust (editorial 57, provenance 37) | 7% | 8.8 | 47 | 4.1 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **66.1 → B** | ### Why each score - Reliability 68 (checked 2026-11-06): Read with the local-software lines, because the server runs on the user's machine and calls the Figma REST API. Installs from the official npm package figma-developer-mcp, with Node 20.20 or later stated in package.json (20). A CI workflow runs prettier, eslint, a type check and the vitest suite, but only on pull requests, and the five newest runs (outside pull requests from 22 August to 2 October) all failed, so passing on the default branch couldn't be confirmed (15). Eight open issues, the oldest open one a 429 rate-limit thread from November 2025 with 30 comments, and nothing open that reports a crash in the current release (18). Release-please changelog with semver tags and breaking defaults called out, such as the switch to `tree` output in 0.13.0 (15). Version 0.13.2, below 1.0 and not declared stable (0). 20 + 15 + 18 + 15 + 0 = 68. - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 87 (checked 2026-11-06): Both tools have typed zod input schemas in src/mcp/tools, with regex checks on fileKey, nodeId and fileName (25). docs.framelink.ai serves llms.txt and a Markdown copy of each page (10). The tool reference explains what each tool returns and how the two chain through `imageDownloadArguments`, and the `depth` parameter says not to use it unless the user asks. The `get_figma_data` description itself is one line and says nothing about when not to call it (14 of 20). Required fields and patterns are typed, and `fileName` must end in .png, .svg or .gif, with no enum for output format at call time (13 of 15). Config and request examples in the docs, a documented `Error fetching file:` prefix and purpose-built 403 and 429 messages, but no list of error cases (10 of 15). Semver releases and a public changelog (15). 25 + 10 + 14 + 13 + 10 + 15 = 87. - Agent ergonomics 83 (checked 2026-11-06): Two compact tools (25). Output is sized by `nodeId` and `depth`, and the default `tree` format drops default values and auto-generated layer names and deduplicates repeated styles and subtrees. No pagination, which a single-file read rarely needs (16 of 20). Errors are written for a model to recover from, with Figma's 403 body surfaced and guidance for wrong node IDs from prototype, branch and FigJam links, per the 0.12.0 changelog (16 of 20). `get_figma_data` carries readOnlyHint and `download_figma_images` openWorldHint, with no destructiveHint on the tool that writes files and no note on overwriting (14 of 20). Only `fileKey` is required and one npx line starts it, but there is no SDK, which a two-tool local server doesn't need (12 of 15). 25 + 16 + 16 + 14 + 12 = 83. - Security & auth 55 (checked 2026-11-06): The credential is the user's own Figma token. Figma personal access tokens are scoped and revocable, and the docs say `file_content:read` is the one scope the server needs. OAuth tokens are accepted but not refreshed, and the token is passed in the client config's args or env, not a URL (25 of 30). The server only reads Figma. Its one write is image files, confined to `--image-dir`, and `--skip-image-downloads` removes that tool; the local HTTP mode has no authentication of its own and binds 127.0.0.1 by default (16 of 20). Layer names and text written by collaborators reach the model as they are, and no prompt-injection guidance was found (3 of 15). Logs go to the local console only, with no per-call audit record (3 of 15). SECURITY.md asks for private reports through GitHub security advisories with a 48-hour acknowledgement. No security.txt, bug bounty or certification (8 of 20). 25 + 16 + 3 + 3 + 8 = 55. - Payments & pricing 60 (checked 2026-11-06): By the self-hosted rule. A free MIT package with nothing to buy (20 + 20 + 20), and no payment protocol (0). Figma API use falls under the user's own Figma plan. 60. - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 41 (checked 2026-11-06): Last release 0.13.2 on 18 June 2026, 141 days before this check (10). No release in the 90 days since 8 August (0). The maintainer merged his own pull requests through June and closed four outside pull requests between July and September, but the three open issues filed since May have no reply and seven outside pull requests from July to October are open without one (8 of 25). In the official MCP registry under the GitHub-verified namespace io.github.GLips, with 0.13.2 as the latest entry (15). CI and tests exist, and the MCP SDK is pinned at 1.29.0 with current dependencies (8 of 10). 10 + 0 + 8 + 15 + 8 = 41. - Transparency & trust 47 (checked 2026-11-06): MIT licence in the repository and on npm (30). No privacy policy or terms on framelink.ai or the docs. Design data goes from Figma to the local model client, and the docs describe what telemetry sends, but there is no data statement to agree with (8 of 30). No deprecation policy. Breaking defaults are called out in the changelog (5 of 20). Telemetry to PostHog (us.i.posthog.com) has been on by default since 0.10.0 on 10 April 2026. The configuration page discloses it with three ways to opt out, while the README doesn't mention it, and an open issue of 16 April 2026 reports that `error_message` can include file keys and node IDs, which the source's redaction (credentials only) doesn't cover (14 of 20). 30 + 8 + 5 + 14 = 57. Fix list, everything this grade says the listing lacks, the biggest gain first (16 items). What it covers is at https://www.anchorterminal.com/fixes/framelink-figma-mcp.md (JSON https://www.anchorterminal.com/fixes/framelink-figma-mcp.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{"listing": "framelink-figma-mcp", "plan": "read"}`, free while the beta runs ### What we couldn't check - Whether CI passes on the default branch: the workflow runs only on pull requests and the latest runs were failing outside contributions. - Whether the maintainer still answers: no reply was found on issues opened since May 2026, while the repository's pushed_at is 27 October 2026. - The coming Framelink team product (early access on the home page) has no public docs or price. ### Sources - repository (shallow clone): tools, telemetry, CI, SECURITY.md, CHANGELOG: (seen 2026-11-06) - npm package metadata and release times: (seen 2026-11-06) - npm weekly downloads: (seen 2026-11-06) - configuration reference, including telemetry: (seen 2026-11-06) - authentication docs: (seen 2026-11-06) - MCP tools reference: (seen 2026-11-06) - docs llms.txt: (seen 2026-11-06) - home page: (seen 2026-11-06) - official MCP registry entry: (seen 2026-11-06) - issues, pull requests and CI runs: (seen 2026-11-06) ## Score history Every move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/framelink-figma-mcp/history.json - 2026-11-06: graded 66.1 B (methodology 0.7) ## Who's behind it (provenance 37/100, checked 2026-11-06) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | not found | 0/20 | | Domain age | framelink.ai, registered 2025-03-22 (1 year) | 3/15 | | Endpoint on the vendor's domain | framelink.ai | 15/15 | | Terms of service | not found | 0/10 | | Privacy policy | not found | 0/10 | | Status page | not found | 0/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | | People named | 1 named with their role, 1 with a public profile | 10/10 | | Support route | help pages, a community | 5/5 | No company is named on www.framelink.ai, whose footer reads only a copyright line. The repository, the npm package and the X account linked from the site belong to Graham Lipsman (GitHub GLips, npm glips, X glipsman). No terms of service or privacy policy linked from www.framelink.ai or docs.framelink.ai. www.framelink.ai/robots.txt sets no Disallow rules for our crawler. docs.framelink.ai/robots.txt allows all paths but /_next/ and /cdn-cgi/, with Content-Signal ai-train=yes, search=yes, ai-input=yes. RDAP gives framelink.ai a registration date of 22 March 2025. /.well-known/security.txt returns 404. SECURITY.md in the repository asks for private reports through GitHub security advisories, with acknowledgement within 48 hours. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0. **Privacy policy**. We found no privacy policy published for this product, so there is nothing to read and the check scores 0. ## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade) ### Key people - Graham Lipsman, Creator and maintainer of the Framelink MCP for Figma. X: https://x.com/glipsman. GitHub: https://github.com/GLips - Note: www.framelink.ai names no company or person; its footer is a copyright line and it links the GitHub repository GLips/Figma-Context-MCP and the X account glipsman. The GitHub account GLips gives the name Graham Lipsman and links glipsman.com, whose projects list says of Framelink (2025) "Made an MCP server that sends Figma data to coding agents"; the npm package figma-developer-mcp has the single maintainer glips. No page calls him a founder, so he is listed as the creator and maintainer and not marked as a founder. No LinkedIn was linked from a first-hand page. Investors were looked for on the home page, the docs, the repository and glipsman.com on 6 November 2026; nothing mentions funding, a company or backers. - Framelink: X https://x.com/glipsman GitHub https://github.com/GLips/Figma-Context-MCP ### Getting support - Discord: https://framelink.ai/discord - Help: https://docs.framelink.ai/troubleshooting - Help: https://github.com/GLips/Figma-Context-MCP/security/advisories/new - Community (GitHub issues): https://github.com/GLips/Figma-Context-MCP/issues - Sources: https://www.framelink.ai/, https://docs.framelink.ai/llms.txt, https://github.com/GLips/Figma-Context-MCP, https://api.github.com/users/GLips, https://registry.npmjs.org/figma-developer-mcp, https://www.glipsman.com/ ## Live (updated 2026-11-07 18:16 UTC) - github `GLips/Figma-Context-MCP` v0.13.2, released 2026-06-18 - mcp-registry `io.github.GLips/Figma-Context-MCP` 0.13.2 - npm `figma-developer-mcp` 0.13.2 - security.txt: none - Watching changelog - Always current: https://www.anchorterminal.com/api/v1/live/framelink-figma-mcp.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Strengths - Two tools with zod input schemas and regex checks on file keys, node IDs and file names - Compact `tree` output that deduplicates repeated styles and subtrees, with `nodeId` and `depth` to narrow a read - Uses a Figma personal access token that needs only `file_content:read`, or a per-request token in HTTP mode - MIT, in the official MCP registry under the maintainer's GitHub namespace, with a release-please changelog - Docs publish llms.txt and a Markdown copy of each page, including a full tool reference ## Weaknesses - Last release 0.13.2 on 18 June 2026, and still below 1.0 - The three open issues filed since May 2026 and seven outside pull requests since July have no reply - PostHog telemetry is on by default, the README doesn't mention it, and an open issue says error messages can carry file keys and node IDs - Read-only on Figma, so an agent cannot change a design through it - No privacy policy, terms or named company on framelink.ai ## Before you call it (notes for agents) 1. Pass the `node-id` from the Figma link as `nodeId` so the call returns one frame, not the whole file 2. Leave `depth` unset unless the user asks, as the tool description says 3. Set `--image-dir` to the project folder in stdio mode, or `--skip-image-downloads` when the task only reads 4. Set `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK=1` in the server's env if the user's policy forbids usage reporting 5. On a 429 from Figma, wait and retry later; the limit is the user's Figma plan, not the server's ## Connect Install: ```bash npx -y figma-developer-mcp --stdio ``` MCP client configuration: ```json { "mcpServers": { "Framelink_Figma_MCP": { "args": [ "-y", "figma-developer-mcp", "--stdio" ], "command": "npx", "env": { "FIGMA_API_KEY": "YOUR-KEY" } } } } ``` Through letme: https://letme.dev/framelink-figma-mcp (letme picks it for design.files, the top-graded tool for the job). letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | Figma API + MCP | B | 63.4 | 515 | design.files, design.components, design.code | no | https://www.anchorterminal.com/tools/figma-mcp.md | | Magic Patterns | B | 63.4 | 517 | design.code, design.files, design.components | no | https://www.anchorterminal.com/tools/magic-patterns.md | | Framer Server API | D | 52.5 | 978 | design.files, design.components, design.code | no | https://www.anchorterminal.com/tools/framer.md | | Sketch | D | 51 | 1039 | design.files, design.components, design.code | no | https://www.anchorterminal.com/tools/sketch.md | | Zeplin | D | 47.6 | 1137 | design.files, design.components, design.code | no | https://www.anchorterminal.com/tools/zeplin.md | | Kite | D | 47 | 1147 | design.files, design.components, design.code | no | https://www.anchorterminal.com/tools/kite-new.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - Two tools, `get_figma_data` (marked readOnlyHint) and `download_figma_images` (openWorldHint), with zod input schemas in src/mcp/tools (source: ) - `--skip-image-downloads` removes the only tool that writes, and `--image-dir` confines image writes to one directory (source: ) - Anonymous PostHog telemetry has been on by default since 10 April 2026 (0.10.0), one event per tool call, turned off with `--no-telemetry`, `FRAMELINK_TELEMETRY=off` or `DO_NOT_TRACK` (source: ) - Output defaults to a compact `tree` format since 0.13.0 on 18 June 2026, which deduplicates repeated styles and subtrees (source: ) - Published in the official MCP registry as io.github.GLips/Figma-Context-MCP, latest 0.13.2 (source: ) - #2 of 16 in Best design workspace and canvas APIs for AI agents: https://www.anchorterminal.com/best/design/index.md - All 120 design comparisons: https://www.anchorterminal.com/compare/design/index.md ## Compare - [Figma API + MCP vs Framelink MCP for Figma](https://www.anchorterminal.com/compare/figma-mcp-vs-framelink-figma-mcp.md): B 63.4 vs B 66.1 - [Framelink MCP for Figma vs Framer Server API](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-framer.md): B 66.1 vs D 52.5 - [Framelink MCP for Figma vs Kite](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-kite-new.md): B 66.1 vs D 47 - [Framelink MCP for Figma vs Magic Patterns](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.md): B 66.1 vs B 63.4 - [Framelink MCP for Figma vs Melius](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-melius.md): B 66.1 vs D 53.3 - [Framelink MCP for Figma vs Miro API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.md): B 66.1 vs B 62.1 - [Framelink MCP for Figma vs pen.dev](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-pen-dev.md): B 66.1 vs E 43.3 - [Framelink MCP for Figma vs Penpot API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-penpot.md): B 66.1 vs E 43.7 - [Framelink MCP for Figma vs Sketch](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-sketch.md): B 66.1 vs D 51 - [Framelink MCP for Figma vs Subframe](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.md): B 66.1 vs E 39.8 - [Framelink MCP for Figma vs Zeplin](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-zeplin.md): B 66.1 vs D 47.6 - [Framelink MCP for Figma vs Impeccable](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-impeccable.md): B 66.1 vs B 69.6 - [Framelink MCP for Figma vs UXKIN](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-uxkin-agent.md): B 66.1 vs C 57.4 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on framelink.ai or one of its subdomains, or the README at the root of github.com/GLips/Figma-Context-MCP. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "framelink-figma-mcp", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html Framelink MCP for Figma on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![Framelink MCP for Figma on Anchor Terminal](https://www.anchorterminal.com/badges/framelink-figma-mcp.svg)](https://www.anchorterminal.com/tools/framelink-figma-mcp) ``` Plain link: ```html Framelink MCP for Figma on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Framelink MCP for Figma is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/framelink-figma-mcp-dark.png - Light: https://www.anchorterminal.com/assets/share/framelink-figma-mcp-light.png --- Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp