B

npm:figbridge-mcp

https://www.npmjs.com/package/figbridge-mcp
85/100 · MCP Trust Grade · checked 2h ago · MCP 0.2.2

What it offers — 30 tools · Developer Tools

get_current_selection

Get the most recent Figma selection pushed from the Figbridge plugin, in the requested format.

get_last_export

Alias for get_current_selection. Returns the last pushed Figbridge payload.

list_history

List recent Figma selections that have been pushed (metadata only, newest first).

get_tokens

Get only the design-token payload (color + number variables, plus CSS variable file and Tailwind config).

bridge_status

Health check for the Figbridge HTTP bridge and the stored payload. Also reports whether a plugin is currently connected (pluginConnected).

select_node

Select a node in Figma and scroll the viewport to it. Provide either a nodeId (e.g.

export_node

Trigger the plugin to export a specific node (by id) without requiring the user to click. Returns the same payload shape as get_current_selection.

list_screens

List every top-level frame (screen) across pages in the currently open Figma file. Each result has { nodeId, name, pageName, width, height, category,

list_components

List local components and component sets (with variants) in the currently open Figma file. Returns [{ nodeId, name, kind:

describe_screen

Return a semantic description of a single screen: size, background color, all text content, components used, inferred category, and a one-paragraph na

export_app_spec

Return a complete JSON catalog of the currently open Figma file: every screen, every component (with variants), design tokens, CSS variables, Tailwind

clone_screen

Duplicate a frame (screen) inside Figma, optionally renaming it and applying text replacements to every TEXT child. Places the clone to the right of t

recolor

Swap SOLID fill/stroke colors across a scope. Scope is

apply_tokens

Bind loose SOLID color fills to matching local color variables (matched by exact hex). Scope is a nodeId or the current selection. Returns { bound, un

list_assets

Export bulk assets from the file as base64. kind=

lint_ds

Lint the file for design-system violations: unbound colors (SOLID fills not using a variable), non-grid spacing (padding/gap not divisible by 4), orph

import_url

Render a URL in headless Chrome (figbridge-managed), walk the DOM with computed styles, and create the resulting frame tree in Figma. The single highe

import_responsive_set

Import a URL at multiple viewport widths and optional light/dark color schemes in one call. Creates one Figma frame per width/theme combination, or re

+12 more tools

Spec / packaging20%100
Security (OWASP MCP)30%70
Maintenance / popularity20%100
Tool hygiene15%70
Transparency / provenance15%90

Findings

INFO Static analysis of npm package figbridge-mcp@0.2.2 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:figbridge-mcp on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:figbridge-mcp grade B
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade B · wmcp.sh
[![MCP Trust Grade B](https://wmcp.sh/mcp/grade/npm%3Afigbridge-mcp/badge.svg)](https://wmcp.sh/mcp/grade/npm%3Afigbridge-mcp)
<a href="https://wmcp.sh/mcp/grade/npm%3Afigbridge-mcp"><img src="https://wmcp.sh/mcp/grade/npm%3Afigbridge-mcp/badge.svg" alt="MCP Trust Grade B · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.