{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-11T21:27:53.457Z", "record_id": "VXI-EXT-TOOL-TRUST-FIGMA-01-v1", "record_kind": "external_reference", "title": "Figma MCP: Design extraction and canvas changes", "system": "Figma remote MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Can an agent treat a design connector as read-only when it can also capture UI and write to canvas?", "near_questions": [ "Can a design connector modify files as well as read them?", "Does Figma MCP send captured application UI to Figma?", "What is the difference between extracting a design and uploading a screen?", "Does Figma remote MCP require OAuth?", "Can any MCP client connect to the official Figma server?", "What permission is needed to generate into an existing Figma file?", "Can Figma seat type affect MCP actions?", "Which design data can a Figma tool return to an agent?", "Should confidential screens be excluded from UI capture?", "Does this Figma review also cover third-party connectors?", "What does a saved design-tool review preserve?", "Does this profile verify my Figma file permissions?" ], "supported_claims": [ { "claim": "Figma's remote MCP documents both design-context retrieval and canvas-changing workflows. OAuth sign-in and an eligible client are required; capabilities and file actions depend on the tool and access rights. Capturing an application UI sends information into Figma, while retrieving a design supplies context to the client. Those are different data-transfer decisions.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent tool execution or security testing", "Vendor certification, guaranteed safety or no-training assurance" ], "public_summary": "Figma's remote MCP documents both design-context retrieval and canvas-changing workflows. OAuth sign-in and an eligible client are required; capabilities and file actions depend on the tool and access rights. Capturing an application UI sends information into Figma, while retrieving a design supplies context to the client. Those are different data-transfer decisions.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-SLACK-01-v1", "VXI-EXT-TOOL-TRUST-ASANA-01-v1", "VXI-EXT-TOOL-TRUST-HUBSPOT-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Figma hosted MCP authorization and data flow", "source_url": "https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/", "checked_on": "2026-10-11", "candidate_record_id": "VXI-EXT-TOOL-TRUST-FIGMA-01-v1", "candidate_record_sha256": "4f1efff1738a4f16925e1a577471f09158d9b6f489b4b8d369c7dd2c504b93d8", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Figma's remote MCP documents both design-context retrieval and canvas-changing workflows. OAuth sign-in and an eligible client are required; capabilities and file actions depend on the tool and access rights. Capturing an application UI sends information into Figma, while retrieving a design supplies context to the client. Those are different data-transfer decisions.", "required_buyer_context": "Figma's official remote MCP; desktop-server behavior and third-party Figma connectors are outside this profile. Actual file access, client eligibility, capture content, plan allowances and model data handling.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Figma remote MCP", "variant": "Figma's official remote MCP; desktop-server behavior and third-party Figma connectors are outside this profile." }, "review_status": "documentation_review_only", "checked_on": "2026-10-11", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Figma hosts the remote MCP endpoint.", "source_ids": [ "figma-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Move between design context, implementation workflows and editable canvas content.", "source_ids": [ "figma-main" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Tools retrieve design context, screenshots, assets and component mappings.", "source_ids": [ "figma-tools" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Canvas workflows create or change content; generating into an existing file requires edit permission.", "source_ids": [ "figma-main", "figma-tools" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth sign-in is documented, and clients must be listed in Figma's MCP catalog.", "source_ids": [ "figma-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Seat, plan, file rights and selected tool affect supported actions; read and write tools are listed separately.", "source_ids": [ "figma-tools" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Design context travels to the client; UI capture can send application content into Figma.", "source_ids": [ "figma-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Uploading confidential screens, modifying the wrong file, or assuming a design integration is read-only.", "source_ids": [ "figma-main", "figma-tools" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Actual file access, client eligibility, capture content, plan allowances and model data handling.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "For design inspection, withhold canvas writes and UI uploads unless their content and destination are authorized.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "figma-main", "url": "https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/", "final_url": "https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/", "title": "Figma hosted MCP authorization and data flow", "checked_on": "2026-10-11", "sha256": "d0fd8bfd1525f77308ce74aca1c1a8cfd2633357601c096dbee2cdd70153d320", "bytes": 56358 }, { "source_id": "figma-tools", "url": "https://developers.figma.com/docs/figma-mcp-server/tools-and-prompts/", "final_url": "https://developers.figma.com/docs/figma-mcp-server/tools-and-prompts/", "title": "Figma MCP read and write tools", "checked_on": "2026-10-11", "sha256": "cc68e7989feedde72ba4d6c9f3d208e587031e32424cefc63e1e822469e1c4fc", "bytes": 104747 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the data-direction and file-change boundaries reviewed before a design-to-code workflow.", "free": "Complete profile, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck eligible client, file rights and new canvas or capture tools before changing the workflow." }, "change_history": [ { "version": 1, "date": "2026-10-11", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#figma-mcp-design-transfer-trust", "machine_readable_record": "/varexis-index/records/figma-mcp-design-transfer-trust.json" }