Localfig MCP server
io.github.LucasGorgal/localfig·v0.4.1·1 starsThe Figma desktop app as an MCP server: full Plugin API for AI agents. Local, no token, no quota.
1 stars49 downloads/wk
Reviews
Write oneNobody has reviewed Localfig yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Localfig tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan4 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 17 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalplugin/code.js: …isable-next-line no-eval var made = eval('(function(){ return 1; })'); if (ty…
How Localfig compares
Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 73% of 1,336 Media servers
- GitHub stars
- 1
- more than 55% of 716 Media servers
- Downloads a week
- 49
- more than 35% of 372 Media servers with a package
Install Localfig in Claude Code, Cursor or VS Code
Runs npx -y localfig on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add localfig -- npx -y localfig
What the publisher says
From the Localfig repository's README, as published. We do not edit it. Read it on GitHub
localfig
The Figma desktop app as an MCP server. localfig gives an AI agent the full Figma Plugin API on the file you have open — through a tiny dev plugin and a loopback HTTP bridge, entirely on your machine.
- Reads and writes. Frames, text, auto-layout, variables, components, image fills, exports, undo — anything the Plugin API can do, the agent can do.
- No Figma cloud API, no personal access token, no per-account quota.
- Zero dependencies. Node built-ins only. Nothing leaves your machine.
- Works with any MCP client that can launch a stdio server: Claude Code, Cursor, Windsurf, Cline, Claude Desktop and more.
MCP client --stdio JSON-RPC--> localfig --http localhost:8765--> Figma plugin --> Plugin APIWhy localfig
Requirements
- Node.js 18 or newer
- The Figma desktop app — dev plugins cannot be imported in the browser
- An MCP client: Claude Code, Cursor, Windsurf, Cline, Claude Desktop, …
Install (once)
npx -y localfig --setupThat generates your local secret, writes the plugin to ~/.localfig/plugin/, registers localfig with every MCP client it finds on your machine, and prints the manifest path for the next step. --dry-run shows what it would do without touching anything, and --clients=cursor,vscode limits it to the clients you name. Prefer a clone? git clone https://github.com/LucasGorgal/localfig.git && cd localfig && node server.mjs --setup does the same.
A client counts as installed when its config folder exists. Setup merges into existing files instead of replacing them: other servers and settings stay, an existing localfig entry keeps its env, and a .localfig.bak copy is written before any change. Files it cannot safely rewrite, such as a settings.json with comments, are left untouched and reported with the entry to paste. Restart any client that was already open.
For a client that is not in the list, add this to its MCP configuration:
{ "mcpServers": { "localfig": { "command": "npx", "args": ["-y", "localfig"] } } }On Windows, use "command": "cmd", "args": ["/c", "npx", "-y", "localfig"] instead: most clients start servers without a shell, and npx is a .cmd script there.
Then import the plugin into Figma (once):
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Localfig: common questions
- Is Localfig MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Localfig safety report
- How do I install Localfig?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Localfig need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Localfig maintained?
- The last commit was 51 days ago (2026-09-16). The latest release is v0.4.1.
- What can I use instead of Localfig?
- Servers from other publishers that do the same job: Figma Rust MCP server, Figma Go MCP server and Mimic AI MCP server. Compare all Localfig alternatives.
- How does Localfig compare with other Media MCP servers?
- safety score 85/100 (higher than 73% of 1,336 Media servers); github stars 1 (more than 55% of 716 Media servers); downloads a week 49 (more than 35% of 372 Media servers with a package). Full comparison.
Alternatives to Localfig
Same job from other publishers: the closest match first, then the best rated.
- Figma RustFigma MCP server in Rust: plugin bridge, no API token, no rate limits, 73 tools.not reviewedEstablishedA
- Figma GoFigma MCP server with full read/write access via plugin bridge — no API token or rate limits.not reviewedGrowingA
- Mimic AIBuilds Figma from your design system: real components and tokens, enforced, learning every build.not reviewedGrowingA
- DembrandtDesign tokens from any live site: colours, type, spacing, components, drift against a baseline.not reviewedWidely usedB
- Figma MCP ServerThe Figma MCP server brings Figma design context directly into your AI workflow.not reviewedEstablishedA