figma-vault MCP server
io.github.NBhey/figma-vault·v0.1.5·1 starsFigma designs pulled once into a local vault; AI agents read them offline with no rate limits
1 stars68 downloads/wk
Reviews
Write oneNobody has reviewed figma-vault yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
figma-vault tools (6)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
vault_get_assetAn image from the document by the path from node.asset.path (for example assets/logo.svg)
vault_get_docNormalized design tree together with its tokens. maxDepth cuts the tree by depth
vault_get_nodeA node by id with all of its descendants. Use it instead of pulling the whole document.
vault_get_tokensColors, text styles and effects of the document. Nodes refer to them via text.token.
vault_listEvery exported document: docId, file and node name, export time, node count.
vault_searchNodes whose name or text content contains the substring (case-insensitive).
Public scan report
scanner v0.1.10 · 2026-11-04 · same rubric, same numbers if you re-run it
- Code scan26 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 37 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How figma-vault compares
Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 78% of 1,337 Media servers
- Tools
- 6
- the typical Media server has 7
- Tools that change things
- 0%
- typical: 4%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 55% of 715 Media servers
- Downloads a week
- 68
- more than 51% of 365 Media servers with a package
What its tools let an agent do: 6 read
Release history: 3 versions in the registry since 2026-09-23, latest 2026-09-28, typically one every 4 days.
Install figma-vault in Claude Code, Cursor or VS Code
Runs npx -y figma-vault on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add figma-vault -- npx -y figma-vault
What the publisher says
From the figma-vault repository's README, as published. We do not edit it. Read it on GitHub
figma-vault
English · Русский
Pull a Figma frame once. Then Claude Code, Codex or any MCP agent reads it as often as it likes: offline, with no Figma token and no rate limits.
however many times the agent looks.
- 3 Figma requests per screen, spent once when you pull it. After that it's zero,
- Icons cost nothing. A real screen had 141 icons, and they took no extra requests.
- Commit the vault and the team needs no Figma access. No licence, no token.
Try it in 30 seconds. You don't need a Figma token for this:
npm i -g figma-vault
figma-vault init && figma-vault demo && figma-vault checkHow it works: the pull normalizes the frame and writes it to disk. The agent then reads it over MCP.
one developer: figma-vault add <link> → vault → git commit
the rest of the team: the agent reads it over MCP, no Figma token neededThe problem
Figma's MCP server and REST API are rate-limited, and on some seats the limit is tiny. While building a UI, an agent goes back to the design all the time to check a margin, a colour or a font size. That can mean dozens of calls in one session. You hit the limit fast and the work stops.
With figma-vault, the number of Figma calls doesn't depend on what the agent does. Each design costs a fixed number of calls, spent once when you pull it.
There's a side effect: the design becomes a file in your repository. A developer without access to the Figma file (no licence, no permissions, no token) still gets the whole design.
How it compares
Other projects work on the same problem. The Framelink Exporter plugin exports a design to a zip for offline use, and there are caching forks of Framelink's Figma MCP. figma-vault takes a different approach:
reads it from git. Nobody else needs Figma access.
- The vault is meant to be committed. One person pulls a design and the whole team
built locally. Rendering them through Figma would eat the image-render limit.
- Icons cost zero requests. Vector paths come with the node tree, and the SVGs are
and a strict validator checks every file.
- The format is fixed and validated. doc.json follows a written contract,
Install
Requires Node.js 22+.
npm i -g figma-vaultOption 1. Per project
figma-vault initThis creates .figma-vault/, registers the server in the project's .mcp.json (other entries are left alone), adds .env to .gitignore and installs a /figma slash command for Claude Code.
Use --no-command to skip the /figma command, so the agent gets only the read-only vault_* tools.
Option 2. Nothing in the repository
figma-vault init --globalThe vault lives in ~/.figma-vault/ and the server is registered in the agent's user config. The project repository never learns the tool exists. Use this when you can't add config or dependencies to the project.
Usage
figma-vault add "https://figma.com/design/KEY/Project?node-id=127-4532"Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
figma-vault: common questions
- Is figma-vault MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the figma-vault safety report
- How do I install figma-vault?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does figma-vault need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is figma-vault maintained?
- The last commit was 37 days ago (2026-09-28). The latest release is v0.1.5.
- What can I use instead of figma-vault?
- Servers from other publishers that do the same job: Figma Rust MCP server, Figma Go MCP server and Figma MCP Server. Compare all figma-vault alternatives.
- How does figma-vault compare with other Media MCP servers?
- safety score 88/100 (higher than 78% of 1,337 Media servers); tools 6 (the typical Media server has 7); tools that change things 0% (typical: 4%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to figma-vault
Same job from other publishers: the closest match first, then the best rated.
- Figma RustFigma MCP server in Rust: plugin bridge, no API token, no rate limits, 73 tools.not reviewedEstablishedA
- Figma GoFigma MCP server with full read/write access via plugin bridge — no API token or rate limits.not reviewedGrowingA
- Figma MCP ServerThe Figma MCP server brings Figma design context directly into your AI workflow.not reviewedEstablishedA
- Figma UIBidirectional Figma MCP — AI draws UI on Figma canvas, reads designs backnot reviewedEstablishedA
- Mimic AIBuilds Figma from your design system: real components and tokens, enforced, learning every build.not reviewedGrowingA