MCP.Market

figma-vault MCP server

by NBhey·io.github.NBhey/figma-vault·v0.1.5·1 stars

Figma designs pulled once into a local vault; AI agents read them offline with no rate limits

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
Growing

1 stars68 downloads/wk

Reviews

Write one

Nobody has reviewed figma-vault yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

figma-vault tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • vault_get_asset

    An image from the document by the path from node.asset.path (for example assets/logo.svg)

  • vault_get_doc

    Normalized design tree together with its tokens. maxDepth cuts the tree by depth

  • vault_get_node

    A node by id with all of its descendants. Use it instead of pulling the whole document.

  • vault_get_tokens

    Colors, text styles and effects of the document. Nodes refer to them via text.token.

  • vault_list

    Every exported document: docId, file and node name, export time, node count.

  • vault_search

    Nodes whose name or text content contains the substring (case-insensitive).

Public scan report

scanner v0.1.10 · 2026-11-04 · same rubric, same numbers if you re-run it

no findings
  • Code scan26 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 37 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How figma-vault compares

Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 78% of 1,337 Media servers
Tools
6
the typical Media server has 7
Tools that change things
0%
typical: 4%. Fewer write tools means less an agent can break
GitHub stars
1
more than 55% of 715 Media servers
Downloads a week
68
more than 51% of 365 Media servers with a package

What its tools let an agent do: 6 read

Release history: 3 versions in the registry since 2026-09-23, latest 2026-09-28, typically one every 4 days.

Install figma-vault in Claude Code, Cursor or VS Code

Runs npx -y figma-vault on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add figma-vault -- npx -y figma-vault
Add to Cursor

What the publisher says

From the figma-vault repository's README, as published. We do not edit it. Read it on GitHub

figma-vault

English · Русский

Pull a Figma frame once. Then Claude Code, Codex or any MCP agent reads it as often as it likes: offline, with no Figma token and no rate limits.

however many times the agent looks.

  • 3 Figma requests per screen, spent once when you pull it. After that it's zero,
  • Icons cost nothing. A real screen had 141 icons, and they took no extra requests.
  • Commit the vault and the team needs no Figma access. No licence, no token.

Try it in 30 seconds. You don't need a Figma token for this:

npm i -g figma-vault
figma-vault init && figma-vault demo && figma-vault check

How it works: the pull normalizes the frame and writes it to disk. The agent then reads it over MCP.

one developer:      figma-vault add <link>  →  vault  →  git commit
the rest of the team:  the agent reads it over MCP, no Figma token needed

The problem

Figma's MCP server and REST API are rate-limited, and on some seats the limit is tiny. While building a UI, an agent goes back to the design all the time to check a margin, a colour or a font size. That can mean dozens of calls in one session. You hit the limit fast and the work stops.

With figma-vault, the number of Figma calls doesn't depend on what the agent does. Each design costs a fixed number of calls, spent once when you pull it.

There's a side effect: the design becomes a file in your repository. A developer without access to the Figma file (no licence, no permissions, no token) still gets the whole design.

How it compares

Other projects work on the same problem. The Framelink Exporter plugin exports a design to a zip for offline use, and there are caching forks of Framelink's Figma MCP. figma-vault takes a different approach:

reads it from git. Nobody else needs Figma access.

  • The vault is meant to be committed. One person pulls a design and the whole team

built locally. Rendering them through Figma would eat the image-render limit.

  • Icons cost zero requests. Vector paths come with the node tree, and the SVGs are

and a strict validator checks every file.

  • The format is fixed and validated. doc.json follows a written contract,

Install

Requires Node.js 22+.

npm i -g figma-vault

Option 1. Per project

figma-vault init

This creates .figma-vault/, registers the server in the project's .mcp.json (other entries are left alone), adds .env to .gitignore and installs a /figma slash command for Claude Code.

Use --no-command to skip the /figma command, so the agent gets only the read-only vault_* tools.

Option 2. Nothing in the repository

figma-vault init --global

The vault lives in ~/.figma-vault/ and the server is registered in the agent's user config. The project repository never learns the tool exists. Use this when you can't add config or dependencies to the project.

Usage

figma-vault add "https://figma.com/design/KEY/Project?node-id=127-4532"

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

figma-vault: common questions

Is figma-vault MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the figma-vault safety report
How do I install figma-vault?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does figma-vault need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is figma-vault maintained?
The last commit was 37 days ago (2026-09-28). The latest release is v0.1.5.
What can I use instead of figma-vault?
Servers from other publishers that do the same job: Figma Rust MCP server, Figma Go MCP server and Figma MCP Server. Compare all figma-vault alternatives.
How does figma-vault compare with other Media MCP servers?
safety score 88/100 (higher than 78% of 1,337 Media servers); tools 6 (the typical Media server has 7); tools that change things 0% (typical: 4%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to figma-vault

Same job from other publishers: the closest match first, then the best rated.

All figma-vault alternatives →
  • Figma Rust
    Figma MCP server in Rust: plugin bridge, no API token, no rate limits, 73 tools.
    A
  • Figma Go
    Figma MCP server with full read/write access via plugin bridge — no API token or rate limits.
    A
  • Figma MCP Server
    The Figma MCP server brings Figma design context directly into your AI workflow.
    A
  • Figma UI
    Bidirectional Figma MCP — AI draws UI on Figma canvas, reads designs back
    A
  • Mimic AI
    Builds Figma from your design system: real components and tokens, enforced, learning every build.
    A