figmanage

MCPcommunity

v1.5.0io.github.dannykeaneUnknownUpdated 1d agonpm GitHub

Let agents manage your Figma workspace. 102 tools for seats, teams, offboarding, and cleanup.

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

8GitHub stars

1d agoLast update

Package

Authorio.github.dannykeane

LicenseUnknown

Version1.5.0

Sourcenpm+mcp-registry

GitHubdannykeane/figmanage

SBOMCycloneDX 1.6 ↓

Trust Status

B

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface40 tools · 7 privileged

Security scan✓ Cleanv1.5.0 · todayHow well does this scan work?

EvalsNone

IndexedSep 21, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 7 privileged

Statically extracted from the published packagev1.5.0 · 9h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

library_usageTeam-level library adoption metrics. Shows how a published library is used across teams.

Team-level library adoption metrics. Shows how a published library is used across teams.

No input schema was published for this tool.

component_usagePer-file component usage analytics. Shows which files use a specific component.

Per-file component usage analytics. Shows which files use a specific component.

No input schema was published for this tool.

list_branchesList branches of a file.

List branches of a file.

No input schema was published for this tool.

create_branchCreate a branch from a file.

Create a branch from a file.

No input schema was published for this tool.

delete_branchprivilegedArchive (delete) a branch. Uses the branch file key from list_branches.

Archive (delete) a branch. Uses the branch file key from list_branches.

No input schema was published for this tool.

list_commentsList comments on a file. Returns comment text, author, timestamps, and thread structure.

List comments on a file. Returns comment text, author, timestamps, and thread structure.

No input schema was published for this tool.

post_commentPost a comment on a file. Optionally pin to a specific node or reply to an existing comment.

Post a comment on a file. Optionally pin to a specific node or reply to an existing comment.

No input schema was published for this tool.

delete_commentprivilegedPermanently delete a comment. For top-level comments, the entire thread is removed. Cannot be undone.

Permanently delete a comment. For top-level comments, the entire thread is removed. Cannot be undone.

No input schema was published for this tool.

list_comment_reactionsList emoji reactions on a comment.

List emoji reactions on a comment.

No input schema was published for this tool.

resolve_commentResolve or unresolve a comment thread. Resolved comments are collapsed in the Figma UI.

Resolve or unresolve a comment thread. Resolved comments are collapsed in the Figma UI.

No input schema was published for this tool.

edit_commentprivilegedEdit the text of an existing comment.

Edit the text of an existing comment.

No input schema was published for this tool.

add_comment_reactionAdd an emoji reaction to a comment.

Add an emoji reaction to a comment.

No input schema was published for this tool.

remove_comment_reactionprivilegedRemove your emoji reaction from a comment.

Remove your emoji reaction from a comment.

No input schema was published for this tool.

list_file_componentsList components published from a file. Only published library components appear -- local unpublished components are not included.

List components published from a file. Only published library components appear -- local unpublished components are not included.

No input schema was published for this tool.

list_file_stylesList styles published from a file. Only published library styles appear.

List styles published from a file. Only published library styles appear.

No input schema was published for this tool.

list_team_componentsList published components across a team. Pass the cursor from the response's pagination object to fetch the next page.

List published components across a team. Pass the cursor from the response's pagination object to fetch the next page.

No input schema was published for this tool.

list_team_stylesList published styles across a team. Pass the cursor from the response's pagination object to fetch the next page.

List published styles across a team. Pass the cursor from the response's pagination object to fetch the next page.

No input schema was published for this tool.

offboard_userNo description published

This tool published no description. Forge does not invent one.

onboard_userInvite a user to teams and optionally share files and set seat type. Sends invite emails per team.

Invite a user to teams and optionally share files and set seat type. Sends invite emails per team.

No input schema was published for this tool.

quarterly_design_ops_reportOrg-wide design ops snapshot: seat utilization, team activity, billing, and library adoption over a given period.

Org-wide design ops snapshot: seat utilization, team activity, billing, and library adoption over a given period.

No input schema was published for this tool.

file_summaryQuick overview of a Figma file. Fetches pages, components, styles, and comment counts in parallel.

Quick overview of a Figma file. Fetches pages, components, styles, and comment counts in parallel.

No input schema was published for this tool.

workspace_overviewFull org snapshot: teams with member/project counts, seat breakdown, and billing summary.

Full org snapshot: teams with member/project counts, seat breakdown, and billing summary.

No input schema was published for this tool.

open_commentsAggregated unresolved comments across all files in a project. Checks up to 20 files.

Aggregated unresolved comments across all files in a project. Checks up to 20 files.

No input schema was published for this tool.

cleanup_stale_filesFind files not modified in N days and optionally trash them. dry_run=true (default) previews which files would be trashed without trashing them. Set dry_run=false to execute.

Find files not modified in N days and optionally trash them. dry_run=true (default) previews which files would be trashed without trashing them. Set dry_run=false to execute.

No input schema was published for this tool.

organize_projectMove files into a target project in a single batch. Files are moved (not copied) from their current project.

Move files into a target project in a single batch. Files are moved (not copied) from their current project.

No input schema was published for this tool.

setup_project_structureCreate multiple projects in a team from a plan. Optionally set descriptions.

Create multiple projects in a team from a plan. Optionally set descriptions.

No input schema was published for this tool.

seat_optimizationIdentify inactive paid seats and calculate potential savings. Fetches members, seat counts, and pricing to find optimization opportunities.

Identify inactive paid seats and calculate potential savings. Fetches members, seat counts, and pricing to find optimization opportunities.

No input schema was published for this tool.

permission_auditAudit permissions across a team or project. Scans files for external editors, open link access, and elevated individual permissions.

Audit permissions across a team or project. Scans files for external editors, open link access, and elevated individual permissions.

No input schema was published for this tool.

branch_cleanupFind stale branches across a project and optionally archive them. dry_run=true (default) previews which branches would be archived. Archives move branch files to trash (recoverable).

Find stale branches across a project and optionally archive them. dry_run=true (default) previews which branches would be archived. Archives move branch files to trash (recoverable).

No input schema was published for this tool.

list_dev_resourcesList dev resources (links, annotations) attached to nodes in a file. Used in Dev Mode.

List dev resources (links, annotations) attached to nodes in a file. Used in Dev Mode.

No input schema was published for this tool.

create_dev_resourceCreate a dev resource (link/annotation) on a node. Visible in Dev Mode.

Create a dev resource (link/annotation) on a node. Visible in Dev Mode.

No input schema was published for this tool.

delete_dev_resourceprivilegedDelete a dev resource from a file.

Delete a dev resource from a file.

No input schema was published for this tool.

export_nodesExport specific nodes from a file as images. Returns temporary URLs (valid ~14 days).

Export specific nodes from a file as images. Returns temporary URLs (valid ~14 days).

No input schema was published for this tool.

get_image_fillsGet download URLs for all images used as fills in a file.

Get download URLs for all images used as fills in a file.

No input schema was published for this tool.

create_fileCreate a new Figma file in a project. Supports design, whiteboard, slides, sites.

Create a new Figma file in a project. Supports design, whiteboard, slides, sites.

No input schema was published for this tool.

rename_fileprivilegedRename a Figma file.

Rename a Figma file.

No input schema was published for this tool.

move_filesprivilegedMove one or more files to a different project. Supports batch moves.

Move one or more files to a different project. Supports batch moves.

No input schema was published for this tool.

duplicate_fileDuplicate a file. Optionally specify a destination project.

Duplicate a file. Optionally specify a destination project.

No input schema was published for this tool.

trash_filesMove files to trash (recoverable via restore_files). Supports batch operations.

Move files to trash (recoverable via restore_files). Supports batch operations.

No input schema was published for this tool.

restore_filesRestore files from trash.

Restore files from trash.

No input schema was published for this tool.

39 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Let agents manage your Figma workspace. 102 tools for seats, teams, offboarding, and cleanup.

Keywords

mcp

Alternatives

Comparing tool surfaces…

Tools exposed

40 tools · 7 privileged · observed 2026-09-21 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-21 — observed resolution, not a publisher declaration.

60 packages resolved · 6 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod3.25.76
axios1.20.04 dependencies
- form-data4.0.6+5 not drawn
- proxy-from-env2.1.0
- follow-redirects1.16.0
- https-proxy-agent5.0.1+2 not drawn
commander13.1.0
axios-retry4.5.01 dependency
- is-retry-allowed2.2.0
string-width7.2.03 dependencies
- strip-ansi7.2.0+1 not drawn
- emoji-regex10.6.0
- get-east-asian-width1.7.0
@modelcontextprotocol/sdk1.30.0+7 not drawn10 dependencies
- ajv8.20.0+4 not drawn
- zod4.6.5
- cors2.8.6+2 not drawn
- hono4.13.8
- jose6.2.12
- express5.2.1incomplete+18 not drawn
- raw-body3.0.2incomplete
- ajv-formats3.0.1incomplete
- cross-spawn7.0.6incomplete
- eventsource3.0.7incomplete

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

58 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 58

body-parser ^2.2.1 — required by express@5.2.1package cap reached
escape-html ^1.0.3 — required by express@5.2.1package cap reached
http-errors ^2.0.0 — required by express@5.2.1package cap reached
on-finished ^2.4.1 — required by express@5.2.1package cap reached
content-type ^1.0.5 — required by express@5.2.1package cap reached
finalhandler ^2.1.0 — required by express@5.2.1package cap reached
range-parser ^1.2.1 — required by express@5.2.1package cap reached
serve-static ^2.2.0 — required by express@5.2.1package cap reached
cookie-signature ^1.2.1 — required by express@5.2.1package cap reached
merge-descriptors ^2.0.0 — required by express@5.2.1package cap reached
content-disposition ^1.0.0 — required by express@5.2.1package cap reached
bytes ~3.1.2 — required by raw-body@3.0.2package cap reached

+46 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.