Medium Risk

convert_to_frame

Convert a group or shape node into a frame in Figma. Preserves position, size, visual properties, and children. Useful for converting groups into auto-layout-capable frames.

How to control convert_to_frame ↓

What convert_to_frame does on Claude Talk to Figma MCP

AI agents use convert_to_frame to create or update resources in Claude Talk to Figma MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Claude Talk to Figma MCP environment.

Medium Risk

Why convert_to_frame needs a policy

This is a Write operation because it modifies design data reversibly—converting a node from one type to another changes the document structure but does not delete data or execute arbitrary code. The effect is limited to a single specified node's structure. Severity is medium because misuse could require manual reversal but affects only the targeted node, not irreversible deletion or external system impact.

From the tool's definition Tool converts a group or shape node into a frame, which modifies the node's type and structure. The description states it 'preserves position, size, visual properties, and children', indicating structural transformation of design elements.

Documented attack patterns abuse exactly the kind of access convert_to_frame gives an agent:

How to control convert_to_frame

PolicyLayer is an MCP gateway — it sits between your AI agents and Claude Talk to Figma MCP, and nothing reaches the server without passing your rules. This is the rule we recommend for convert_to_frame:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "convert_to_frame": {
      "limits": [
        {
          "counter": "convert_to_frame_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

convert_to_frame stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

  1. Create a free account and register Claude Talk to Figma MCP — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
LIMIT THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about convert_to_frame

What does the convert_to_frame tool do? +

Convert a group or shape node into a frame in Figma. Preserves position, size, visual properties, and children. Useful for converting groups into auto-layout-capable frames. It is categorised as a Write tool in the Claude Talk to Figma MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on convert_to_frame? +

Register the Claude Talk to Figma MCP server in PolicyLayer and add a rule for convert_to_frame: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Claude Talk to Figma MCP. Nothing to install.

What risk level is convert_to_frame? +

convert_to_frame is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit convert_to_frame? +

Yes. Add a rate_limit block to the convert_to_frame rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block convert_to_frame completely? +

Set action: deny in the PolicyLayer policy for convert_to_frame. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides convert_to_frame? +

convert_to_frame is provided by the Claude Talk to Figma MCP server (arinspunk/claude-talk-to-figma-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every Claude Talk to Figma MCP tool call.

Start from Claude Talk to Figma MCP, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

93 Claude Talk to Figma MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.