Integrations

Figma

Connect Figma to read files and frames, export assets, pull design tokens and copy, reply to comments, browse team libraries, and watch for changes.

API credentialsAI, Voice & MediaFigma API docsFigma MCP server overview

You paste one value into PopMCP: a Figma personal access token (it starts with figd_), generated in Figma under Settings, Security. Organization and Enterprise admins can paste a plan access token instead.

Setup time
2 min
Auth
API credentials
API base URL
https://api.figma.com
Rate limits
Per user, by seat, plan and endpoint tier (since November 17, 2025). Tier 1 (file JSON, nodes, image exports): up to 20 a month for View and Collab seats; 10, 15 or 20 a minute for Dev and Full seats on Professional, Organization and Enterprise. Tier 2: 25 to 100 a minute. Tier 3: 50 to 150 a minute. Over a limit Figma answers 429 with Retry-After.

Before you begin

  • A Figma account on any plan, the free Starter plan included
  • Access in Figma to the files and teams you want the AI to work with: the token reaches exactly what your account can open
  • A Dev or Full seat if the AI will read files often: Figma gives View and Collab seats only a few file reads and image exports a month through its API

Get your credentials

Sign in to Figma and open Settings

Sign in at figma.com. In the file browser click your account menu (your name, top left) and choose Settings.

Open this screen →

Open Security and click Generate new token

In Settings open the Security tab. Under Personal access tokens, click Generate new token. Tokens you made before are listed here too, with when each was last used.

Open this screen →

figma.com/settings
SearchAda Lovelace
Settings / Security

Settings

Account, Notifications and Security for your Figma account.

Settings
Tab
Security
Personal access tokens
Scripts (last used 3 days ago)
Hover a token to see its scopes; revoking is instant
Generate new token

Name the token, set 90 days and every permission

Name it PopMCP. Set Expiration to 90 days, the longest Figma allows (tokens that never expire were removed in 2025). Figma shows one dropdown per permission: give each its highest option, Read-only or Write where offered, so every PopMCP tool works. Then click Generate token.

Open this screen →

figma.com/settings
SearchAda Lovelace
Settings / Security / Generate new token

Generate new token

Set the expiration and scopes for the token.

Generate new token
Token name
PopMCP
Expiration
90 days
1, 7, 30 or 90 days
File content
Read-only
Comments
Write
Dev resources
Write
Webhooks
Write
Every other permission
Read-only
Current user, file metadata and versions, library assets and content, team library content, folders or projects
Generate tokenCancel

On Enterprise plans Variables and Library analytics appear too: set them to Write and Read-only to use variables and library analytics.

Copy the token

Figma shows the token once, right after you generate it. Copy it now: if you close the dialog first, generate a new one.

Open this screen →

figma.com/settings
SearchAda Lovelace
Settings / Security / Generate new token

Generate new token

This is your only chance to copy the token.

Copy this token now. You will not be able to see it again.
PopMCP
Token
figd_••••••••••••••••••••••••••••••••
Expires
In 90 days
Copy this token

Figma has no way for an app to look up your teams, so PopMCP can take your team's link. Open the team in the file browser's sidebar and copy the address from the browser bar: the number after /team/ is the team id. With it, the AI can list your team's folders, files and library without asking.

Open this screen →

figma.com/files/team/1234567890123456789/Design
SearchAda Lovelace
Teams / Design

Design

Folders and files in this team.

FolderFilesLast edited
WebsiteTeam folder122 hours ago
Design systemTeam folder4Yesterday

Copy the whole address from the browser bar. PopMCP reads the team id (the long number after /team/) from it.

Add the token in PopMCP

In PopMCP, paste the token into Personal access token. If you copied a team link, open More options and paste it into Team link. Then connect: PopMCP checks the token by reading your Figma profile.

Connect in PopMCP

Open your workspace, choose Figma in the marketplace, and fill in the connect dialog:

FieldWhat to enter
Personal access tokensecretIn Figma click your account menu (top left), choose Settings, open the Security tab and, under Personal access tokens, click Generate new token. Name it PopMCP, set Expiration to 90 days (the longest Figma allows), set each permission to its highest option (Read-only, or Write where offered), click Generate token and copy it (Figma shows it once). Stored encrypted.Encrypted with AES-256-GCM on save and never shown again.
Team link (optional)textOptional. Open your team in Figma's file browser and copy the address from the browser bar (it has /team/ and a number in it). With it the AI can list your team's folders, files and library without asking which team. Figma has no way to look teams up.

PopMCP verifies the credential against Figma immediately. On success the connection flips to Verified and its MCP tools are provisioned.

Verify it worked

PopMCP marks the Figma connection Verified with your Figma handle and email (a plan access token shows as Figma plan access token). Asking the AI to outline a file from its link returns the file's pages and top-level frames.

Troubleshooting

"Figma did not accept this token. It may have expired (personal access tokens last 90 days at most), been revoked, or been copied only in part."

Why: The token expired, was revoked in Settings, Security, or was copied incompletely.

Fix: Generate a new token under **Settings**, **Security**, **Personal access tokens** and paste the whole value.

"That is a Figma link, not a token."

Why: A file or team address was pasted into the token field.

Fix: Paste the token (it starts with figd_) into **Personal access token**, and a team link only into **Team link** under **More options**.

A tool fails with "Invalid scope(s)"

Why: The token was generated without the permission that tool needs (for example Comments left at Read-only, or File metadata at No access).

Fix: Generate a new token with that permission at Read-only or Write, keep the others, and reconnect Figma in PopMCP with it.

File reads or image exports fail with 429 after a few calls

Why: Figma limits file JSON, node reads and image exports (Tier 1) by seat: View and Collab seats get only a few a month, Dev and Full seats 10 to 20 a minute.

Fix: Ask for single frames or the file outline instead of whole files, export several frames in one request, wait the time Figma's answer gives, or use an account with a Dev or Full seat.

The AI asks which team

Why: Figma has no API that lists your teams, and no team link was saved on the connection.

Fix: Give the team page's link in the chat, or reconnect and paste it into **Team link** under **More options**.

Variables tools answer 403

Why: Figma's Variables API is available only to members of Enterprise organizations.

Fix: Use extract_design_tokens for published styles on any plan, or connect with an account in an Enterprise organization.

Reference

On this page