---
title: "figma"
description: "Internal only. Not a public Integration or Marketplace release. Read authorized Figma files through the official remote MCP server. Writes stay limited to changes the user requested."
canonical: https://agentpluginsdirectory.com/plugins/figma--xpert-ai
last-updated: 2026-10-10
---

# figma
Internal only. Not a public Integration or Marketplace release. Read authorized Figma files through the official remote MCP server. Writes stay limited to changes the user requested.
- Slug: figma--xpert-ai
- Publisher: Xpert AI
- Repository: https://github.com/xpert-ai/xpert-plugins
- Manifest: agent-plugins/figma/plugin.json
- Version: 1.0.0
- Category (editorial): other
- Skills: 1 (figma-workspace)
- MCP servers: 1 (figma)
- Stars: 8
- Repository created: 2025-09-19
- Repository last pushed: 2026-10-10
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/figma--xpert-ai
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What figma does, in the publisher's words

Read authorized Figma files through the official remote MCP server, and apply only changes the user requested.

Official endpoint: https://mcp.figma.com/mcp

Product docs: Figma MCP server

- Unauthenticated tools/list returned 401. Protected-resource metadata at both the origin and /mcp reports resource https://mcp.figma.com/mcp, which matches the endpoint. Minimum OAuth scope: mcp:connect. That is the only scope in scopes_supported.
- Authorization server: issuer https://api.figma.com, authorize https://www.figma.com/oauth/mcp, token https://api.figma.com/v1/oauth/token, registration https://api.figma.com/v1/oauth/mcp/register. PKCE S256 is required, and state is required.
- Token endpoint auth methods are only client_secret_basic and client_secret_post. A dynamic registration that returns a confidential client still needs a client secret. The host's public-client PKCE flow may be unable to complete that exchange.
- Figma documents that only MCP Catalog clients can connect, and that new clients join a waitlist. Xpert may be rejected even when OAuth metadata is correct.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/xpert-ai/xpert-plugins/HEAD/agent-plugins/figma/README.md