figma-developer-mcp

npm / sealed 2026-06-12 / No. 89a23b44

> throne registry figma-developer-mcp sealed

This target couldn't be started as an MCP servernever completed an MCP handshake — this target may not be an MCP server, or may need a manual build / non-Node runtime

receiptsealed evidence

scan id: 89a23b44acc24c9fb25319dfe51aa483
target: figma-developer-mcp
sealed at: 2026-06-12 18:19:49Z
evidence hash: sha256:fd2d31bd9424080b13af8c44028d4b38a37b6f51b38cb0184735845002d2406d

01connectFAIL1.5s

RuntimeError: connect failed: McpError: Connection closed

02discoverSKIPPED0ms

not run — connect failed

03validate_schemasSKIPPED0ms

not run — connect failed

04smoke_test_toolsSKIPPED0ms

not run — connect failed

05error_handlingSKIPPED0ms

not run — connect failed

06streamingSKIPPED0ms

not run — connect failed

07resource_lifecycleSKIPPED0ms

not run — connect failed

08concurrent_callsSKIPPED0ms

not run — connect failed

09reconnectSKIPPED0ms

not run — connect failed

01connectFAIL1.4s

RuntimeError: connect failed: McpError: Connection closed

02discoverSKIPPED0ms

not run — connect failed

03validate_schemasSKIPPED0ms

not run — connect failed

04smoke_test_toolsSKIPPED0ms

not run — connect failed

05error_handlingSKIPPED0ms

not run — connect failed

06streamingSKIPPED0ms

not run — connect failed

07resource_lifecycleSKIPPED0ms

not run — connect failed

08concurrent_callsSKIPPED0ms

not run — connect failed

09reconnectSKIPPED0ms

not run — connect failed

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON

SECURITY: REVIEW / 1 finding(s) / review material, not a verdict

LOWTHR-NET-05 / Hardcoded outbound endpoints

5 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: api.figma.com (package/dist/chunk-BHCBIRJY.js:14), developers.figma.com (package/dist/chunk-BHCBIRJY.js:14), proxy (package/dist/bin.js:2), us.i.posthog.com (package/dist/chunk-BHCBIRJY.js:1), www.framelink.ai (package/dist/chunk-BHCBIRJY.js:11)

package/dist/bin.js:2

VERDICT: INCONCLUSIVESANDBOXED RUN — submitted server executed in a disposable microVM — compatibility not assessable: the server process ran but never completed an MCP handshake — this target may not be an MCP server, or may need a manual build / non-Node runtime / security: review — 1 finding(s), 0 highsealed by THRONE / No. 89a23b44 / 2026-06-12

executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.