Figma Mcp Server
TimHolden/figma-mcp-server⭐ 147🔧 11 tools
C5.2SpiderScore (registry)
Decision
Allow with Risk
Confidence
90%
Figma Mcp Server has risks — usable with isolation (5.21/10, 0 critical, 0 high).
Risk Flags (1)
- mediumts_input_reflectionUser input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
- positivew=0.5Overall quality score = 5.21/10 (grade C)
- negativew=0.3Tool description clarity score = 2.3/10
Source: SpiderRating automated security scanUpdated: 2026-03-21Protocol: v1.1
Description Quality
Composite: 2.3 / 10
3-Layer Breakdown
Description (38%)
2.3
Security (34%)
9.2
Metadata (28%)
5.2
Description Dimensions
Intent Clarity
4.0
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
3.3
Operational Boundaries
2.6
Security Analysis
9.2
Score
0
Critical
0
High
1
Medium
0
Low
MEDIUM
src\logger.ts:26
Metadata Health
Provenance (40%)
7.0
Maintenance (35%)
2.0
Popularity (25%)
6.6
Badge
Add this badge to your README:
[](https://spiderrating.com/servers/TimHolden/figma-mcp-server)🛡️
Protect Your Agents
Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.
Get Free API Key →📊
Monitor All Your Servers
Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.
Start Free Trial →⭐
Scan Locally (Open Source)
Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.
Star on GitHub →