// SCAN REPORT

Figma Spec

19 tools. 3 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

3 can modify or destroy data

16 read-only

19 tools total

Community server · catalogue entry verified 29/06/2026

How to control Figma Spec ↓

TOOL MAP

What Figma Spec exposes to your agents

Read (16) Write / Execute (3) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Figma Spec tools

Write · Medium export_images Exports Figma nodes as images (PNG, JPG, SVG, PDF) via the Figma image export API. Returns download URLs for each requested node. Write · Medium generate_implementation_contract Analyzes a Figma frame or component subtree and produces an implementation contract with scope, assets, states, prototype interactions, depe Write · Medium resolve_components Scans a Figma subtree or full file for instances, resolves each unique component through the file component map and Figma component API, and

3 of Figma Spec's 19 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Figma Spec

PolicyLayer is an MCP gateway — it sits between your AI agents and Figma Spec, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "export_images": {
    "limits": [
      {
        "counter": "export_images_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "audit_accessibility": {
    "limits": [
      {
        "counter": "audit_accessibility_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Figma Spec — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FIGMA SPEC →

Instant setup, no code required.

FULL CATALOGUE

All 19 Figma Spec tools

WRITE 3 tools

Write export_images Exports Figma nodes as images (PNG, JPG, SVG, PDF) via the Figma image export API. Returns download URLs for e Write generate_implementation_contract Analyzes a Figma frame or component subtree and produces an implementation contract with scope, assets, states Write resolve_components Scans a Figma subtree or full file for instances, resolves each unique component through the file component ma

READ 16 tools

Read audit_accessibility Audits a Figma frame for WCAG 2.1 accessibility issues: contrast ratios, touch targets, missing alt text, font Read bridge_to_codebase Scans Figma components and a local codebase, then maps component names to likely implementation files using ex Read diff_versions Fetches two Figma file versions and reports added, removed, and modified nodes by comparing names, types, geom Read extract_design_tokens Extracts all design tokens (colors, typography, spacing) from a Figma file and exports them in your chosen for Read extract_flows Extracts prototype flows from a page or frame by finding transition links in the node tree, then returns direc Read extract_missing_states Finds components and component sets in a Figma subtree, compares detected states against a standard expected-s Read extract_variants Reads a Figma component set and returns structured variant data including parsed variant properties, dimension Read flow_to_test_cases Converts Figma prototype transitions into deterministic navigation test cases and reports dead ends, unreachab Read inspect_layout Inspects a Figma frame and returns deterministic layout data: node hierarchy, auto-layout vs absolute position Read lint_handoff_readiness Scans a Figma page or subtree for common engineering handoff issues including default layer names, auto-layout Read map_to_flutter Map a Figma frame to a Flutter widget tree with Material or Cupertino suggestions, constructor-style propertie Read map_to_react Map a Figma frame to a React component tree with JSX structure, Tailwind or CSS styling output, component libr Read map_to_react_native Map a Figma frame to a React Native component tree with StyleSheet-style output, mobile component library sugg Read map_to_swiftui Map a Figma frame to a SwiftUI view tree with modifier suggestions, asset hints, and generated color asset hel Read map_to_unity Produces a Unity UGUI mapping spec from a Figma frame. Maps Figma constraints to RectTransform anchors, auto-l Read simplify_context Produces an AI-optimized, token-efficient representation of a Figma frame. Strips noise, collapses wrappers, g

FAQ

Questions about Figma Spec

How do I prevent bulk modifications through Figma Spec? +

The Figma Spec server has 3 write tools including export_images, generate_implementation_contract, resolve_components. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Figma Spec.

How many tools does the Figma Spec MCP server expose? +

19 tools across 2 categories: Read, Write. 16 are read-only. 3 can modify, create, or delete data.

How do I enforce a policy on Figma Spec? +

Register the Figma Spec MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Figma Spec tool call.

Deterministic rules across all 19 Figma Spec tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FIGMA SPEC →

Instant setup, no code required.

19 Figma Spec tools catalogued and risk-classified — across an index of 43,000+ MCP servers.