registry / @mp3wizard/figma-console-mcp / 1.34.1

@mp3wizard/figma-console-mcp@1.34.1

The most comprehensive MCP server for Figma — design tokens, variables, components, write tools, version history diff, accessibility audits, FigJam, Slides, and more. Local (WebSocket Desktop Bridge plugin) and Cloudflare Workers (paired + remote) modes.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

The user-invoked MCP server exposes arbitrary JavaScript execution inside a connected Figma plugin, with access to that document's Figma API context. This is an intentional but dangerous agent capability, not an install-time payload.

Static reason

No blocking static signals were detected.; source closely matched a different package identity; previous stored version diff introduced dangerous source

Trigger

Run the MCP server, open the Desktop Bridge plugin, then invoke figma_execute through an MCP client.

Impact

An authorized or compromised MCP client can read or modify the connected Figma document.

Mechanism

MCP command forwarded over localhost WebSocket and evaluated in the Figma plugin sandbox.

Rationale

No concrete malicious install-time or stealth behavior was found. The package nevertheless deliberately supplies arbitrary Figma-plugin code execution to MCP clients, a dangerous dual-use capability that merits a warning.

Evidence

package.jsondist/local.jsdist/core/write-tools.jsdist/core/websocket-connector.jsfigma-desktop-bridge/code.jsfigma-desktop-bridge/manifest.jsonfigma-desktop-bridge/ui.html~/.figma-console-mcp/plugin/manifest.json~/.figma-console-mcp/plugin/code.js~/.figma-console-mcp/plugin/ui.html

Network endpoints3

/v1

@mp3wizard/figma-console-mcp@1.34.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code