← Back to search

@bromso/figma-mcp

bromso Scanned 10d ago

Bridge between AI MCP clients and Figma. Stdio shim + daemon + bundled bridge plugin.

npm ↗
C
65.8 / 100

Versions

1.6.0latest
May 10, 2026
1.5.0
May 8, 2026
1.4.0
May 8, 2026
1.3.1
May 7, 2026
1.3.0
May 7, 2026
+ show 3 moreshow less
1.2.0
May 7, 2026
1.1.0
May 7, 2026
1.0.0
May 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 97

audit_contrast
annotations: none low

WCAG 2.x contrast audit. Computes the contrast ratio between the node's first SOLID text fill and the first SOLID fill on its ancestors (resolved background). Returns AA / AAA pass/fail flags. Returns null ratio when fill or background is unresolvable (e.g. mixed fills, gradient background, no parent with a solid fill).

hex string input object ratio number width number height number nodeId string output object reason string passesAA boolean passesAAA boolean sourceHex string isLargeText boolean simulatedHex string passesMinimum boolean passesEnhanced boolean
audit_target_size
annotations: none low

WCAG 2.2 target-size audit (Success Criterion 2.5.5). Reads node.absoluteBoundingBox and reports whether min(width, height) is ≥ 24 (passesMinimum) and ≥ 44 (passesEnhanced).

hex string text string input object width number height number nodeId string output object reason string sourceHex string simulatedHex string passesMinimum boolean passesEnhanced boolean
simulate_color_blindness
annotations: none low

Simulate how a hex color appears to a viewer with the named color-vision deficiency. Pure computation — does not touch the design. Useful for the LLM to check whether a brand color survives the deficiency before accepting it.

hex string text string input object label string nodeId string output object sourceHex string simulatedHex string
set_alt_text
annotations: none low

Write alt text for a node. Stored in pluginData under `a11y/altText` AND attached as an annotation (categoryless) so the alt text is visible in Figma's annotation panel. Overwrites any existing alt text. Idempotent — calling again with a new value replaces both the pluginData entry and the existing annotation.

text string input object label string nodeId string output object
get_alt_text
annotations: none low

Read alt text for a node. First checks pluginData (`a11y/altText`); if absent, falls back to the first annotation whose category is the alt-text category (or, in this implementation, the first categoryless annotation). Returns null if neither source has a value.

text string input object label string nodeId string output object
set_aria_label
annotations: none low

Write an ARIA label for a node. Stored in pluginData under `a11y/ariaLabel`. Does NOT attach an annotation (ARIA labels are usually shorter than alt text and clutter the annotation panel; designers can still surface them via `audit_a11y_summary`).

input object label string nodeId string output object categoryId string annotations array
get_aria_label
annotations: none low

Read the ARIA label for a node. Returns null if not set.

input object label string nodeId string output object categoryId string annotations array
set_landmark_role
annotations: none low

Tag a node with a WAI-ARIA landmark role. Writes pluginData under `a11y/landmarkRole`. Use to mark headers (`banner`), nav menus (`navigation`), main content regions (`main`), sidebars (`complementary`), footers (`contentinfo`), search forms (`search`), generic forms (`form`), or generic regions (`region`).

input object label string nodeId string output object categoryId string annotations array
get_landmark_role
annotations: none low

Read the WAI-ARIA landmark role tag for a node. Returns null if not set.

input object label string detail string nodeId string output object categoryId string annotations array
list_annotations
annotations: none low

Return every annotation attached to a node, with each entry's array index (annotations have no stable ids in the plugin API; the index is the addressing scheme).

input object label string checks array detail string nodeId string output object recursive boolean categoryId string annotations array
add_annotation
annotations: none low

Append an annotation to a node. The annotation appears in Figma's annotation panel attached to the node. `categoryId` ties it to a category (see `figma.annotations.categories`); omit for a categoryless annotation. Returns the new entry's array index.

label string checks array detail string nodeId string output object recursive boolean categoryId string
remove_annotation
annotations: none low

Remove the annotation at the given array index. Indices shift after removal — re-list before removing more than one. Throws if `annotationIndex` is out of range.

checks array detail string nodeId string output object recursive boolean
audit_a11y_summary
annotations: none low

Walk a node (optionally recursively) and aggregate accessibility checks: contrast, target size, alt text, ARIA label, landmark role. Each check is graded `ok` / `warn` / `error` with a human-readable detail string. The most useful tool when an LLM wants to grade a frame's overall a11y posture in a single call.

checks array nodeId string output object recursive boolean
create_sticky
annotations: none low

FigJam-only. Create a sticky note with the given content (and optional author name).

x number y number code string type literal nodeId string output object content string language string endNodeId string authorName string startNodeId string
create_section
annotations: none low

FigJam-only. Create a labeled section that can group nodes.

x number y number code string rows number type literal nodeId string output object columns number content string language string endNodeId string startNodeId string
create_connector
annotations: none low

FigJam-only. Create a connector linking two existing nodes by id. Both endpoints must exist.

x number y number code string rows number type literal nodeId string output object columns number content string language string endNodeId string startNodeId string
create_code_block
annotations: none low

FigJam-only. Create a code block with a language label (defaults to 'plaintext').

x number y number code string rows number type literal nodeId string output object columns number content string language string
create_shape_with_text
annotations: none low

FigJam-only. Create a labeled shape (sticky-note-like surface with a fixed silhouette).

x number y number rows number type literal count number input object moved number nodeId string output object columns number content string nodeIds array sectionId string
create_table
annotations: none low

FigJam-only. Create a table with the given row + column count.

x number y number rows number type literal count number input object moved number nodeId string output object columns number content string nodeIds array sectionId string
set_sticky_content
annotations: none low

FigJam-only. Replace the content of an existing sticky note.

type literal count number input object moved number nodeId string output object content string nodeIds array sectionId string
set_section_name
annotations: none low

FigJam-only. Replace the name label of an existing section.

type literal count number input object moved number nodeId string output object nodeIds array sectionId string
move_into_section
annotations: none low

FigJam-only. Add node ids to a section's children list.

count number input object moved number output object nodeIds array sectionId string
list_section_children
annotations: none low

FigJam-only. Return the node ids currently inside a section.

count number input object output object nodeIds array sectionId string
extract_styles
annotations: none low

Extract paint/text/effect styles from a Figma file.

input object output object styles array fileKey string
import_variables
annotations: none low

Stream variables into the current Figma file. Resumable + idempotent. Set atomic:true to roll back on first failure.

id string input object items array value unknown atomic boolean cursor union failed number modeId string output object applied number updates array pageSize number chunkSize number completed boolean sessionId string nextCursor union variableId string lastAckedSeq number valuesByMode record failedDetails array
export_variables
annotations: none low

Return local variables, paginated. Pass nextCursor to resume.

input object items array value unknown atomic boolean cursor union failed number modeId string output object applied number updates array pageSize number completed boolean sessionId string nextCursor union variableId string lastAckedSeq number failedDetails array
update_variables_batch
annotations: none low

Apply many setValueForMode calls in one request. Non-atomic: per-item failures don't stop the rest.

input object value unknown atomic boolean failed number modeId string output object applied number updates array completed boolean sessionId string variableId string lastAckedSeq number failedDetails array
stream_status
annotations: none low

Report progress of an in-flight or recently-completed import session.

input object atomic boolean failed number output object applied number completed boolean sessionId string lastAckedSeq number
create_rectangle
annotations: none low

Create a rectangle node on the current page.

x number y number x1 number x2 number y1 number y2 number type literal color object nodeId string output object content string fontSize number characters string
create_frame
annotations: none low

Create a frame (auto-layout-capable container) on the current page.

x number y number x1 number x2 number y1 number y2 number type literal color object nodeId string output object content string fontSize number characters string
create_ellipse
annotations: none low

Create an ellipse node on the current page.

x number y number x1 number x2 number y1 number y2 number type literal color object nodeId string output object weight number content string fontSize number characters string
create_line
annotations: none low

Create a line node defined by two endpoint coordinates.

x number y number x1 number x2 number y1 number y2 number type literal color object input object width number height number nodeId string output object weight number content string fontSize number characters string
create_text
annotations: none low

Create a text node with the given characters and (optional) font size.

x number y number type literal color object input object width number height number nodeId string output object weight number content string fontSize number characters string
set_text_content
annotations: none low

Replace the characters of an existing TEXT node.

key string type literal color object input object width number height number nodeId string output object weight number characters string componentId string
set_fill
annotations: none low

Set the fill paint(s) on a node. Phase 8 supports a single SOLID paint.

key string input object width number height number nodeId string output object weight number componentId string
set_stroke
annotations: none low

Set the stroke paint and (optional) weight on a node.

key string input object width number height number nodeId string output object weight number componentId string
resize_node
annotations: none low

Resize a node's bounding box.

key string input object width number height number nodeId string output object componentId string
clone_node
annotations: none low

Clone a node and return the id of the new copy.

key string input object nodeId string output object componentId string
delete_node
annotations: none low

Remove a node from the page.

key string input object nodeId string output object componentId string
create_component
annotations: none low

Wrap an existing node into a reusable component; returns componentId + key.

key string input object nodeId string output object componentId string
extract_components
annotations: none low

Return all local components.

pid number input object daemon object output object plugin object version string uptimeMs number connected boolean variables array components array lastConnectedAt number
extract_local_variables
annotations: none low

Return all local variables in the current file.

pid number input object daemon object output object plugin object version string uptimeMs number connected boolean variables array lastConnectedAt number
bridge_status
annotations: none low

Report daemon liveness, version, and whether a Figma plugin is paired.

pid number input object daemon object output object plugin object version string uptimeMs number connected boolean lastConnectedAt number
get_file_metadata
annotations: none low

REST. Return narrowed metadata for a Figma file: name, lastModified, version, role, editorType.

id string key string grid array role string text array type string after string found boolean input object label string pages array paint array before string effect array nodeId string output object version string nextPage string pageSize number prevPage string versions array createdAt string editorType string pagination object userHandle string lastModified string
get_file_pages
annotations: none low

REST. Return the page list (CANVAS children) of a Figma file.

id string key string grid array text array type string after string found boolean input object label string pages array paint array before string effect array nodeId string output object nextPage string pageSize number prevPage string versions array createdAt string components array pagination object userHandle string
get_node_by_id
annotations: none low

REST. Return the type/name of a node by id (returns found: false when the node does not exist).

id string key string grid array text array type string after string found boolean input object label string paint array before string effect array nodeId string output object nextPage string pageSize number prevPage string versions array createdAt string components array pagination object userHandle string componentSets array
get_file_versions
annotations: none low

REST. Return the version history of a Figma file (paginated via before/after).

id string key string grid array text array after string input object label string paint array before string effect array nodeId string output object branches array nextPage string pageSize number prevPage string versions array createdAt string components array pagination object userHandle string mainFileKey string lastModified string componentSets array
get_file_styles
annotations: none low

REST. Return the file's local styles bucketed by type (paint/text/effect/grid).

id string key string grid array text array email string input object paint array scale number effect array format enum handle string images record imgUrl string nodeId string output object nodeIds array branches array components array mainFileKey string lastModified string componentSets array
get_file_components
annotations: none low

REST. Return the file's published components.

x number y number id string key string email string input object scale number format enum handle string images record imgUrl string output object message string nodeIds array branches array comments array parentId string createdAt string components array userHandle string mainFileKey string lastModified string componentSets array
get_file_component_sets
annotations: none low

REST. Return the file's published component sets (variants).

x number y number id string key string email string input object scale number format enum handle string images record imgUrl string output object message string nodeIds array branches array comments array parentId string createdAt string userHandle string mainFileKey string lastModified string componentSets array
get_file_branches
annotations: none low

REST. Return the file's branches.

x number y number id string key string email string input object scale number format enum handle string images record imgUrl string output object message string nodeIds array branches array comments array parentId string createdAt string userHandle string mainFileKey string lastModified string
get_image_renders
annotations: none low

REST. Render specified nodes as PNG/SVG/PDF/JPG and return presigned URLs.

x number y number id string ok literal email string input object scale number format enum handle string images record imgUrl string output object teamId string message string nodeIds array comments array parentId string projects array commentId string createdAt string userHandle string
get_image_fills
annotations: none low

REST. Return the file's image fill asset URLs (by hash).

x number y number id string ok literal key string email string files array input object handle string images record imgUrl string output object teamId string message string comments array parentId string projects array commentId string createdAt string projectId string branchData boolean userHandle string lastModified string
get_user_me
annotations: none low

REST. Return the authenticated user's profile.

x number y number id string ok literal key string email string files array input object handle string imgUrl string output object teamId string message string comments array parentId string projects array commentId string createdAt string projectId string branchData boolean userHandle string lastModified string
get_file_comments
annotations: none low

REST. Return the file's comments.

x number y number id string ok literal key string files array input object cursor string output object teamId string message string comments array pageSize number projects array commentId string projectId string styleType string branchData boolean components array nextCursor string lastModified string
post_file_comment
annotations: none low

REST. Post a new comment. WRITE — gated behind --enable-write-tools (default off).

x number y number id string ok literal key string files array input object cursor string output object styles array teamId string message string pageSize number projects array commentId string projectId string styleType string branchData boolean components array nextCursor string lastModified string
delete_file_comment
annotations: none low

REST. Delete a comment. WRITE — gated behind --enable-write-tools (default off).

id string ok literal key string url string files array input object cursor string nodeId string output object styles array teamId string fileKey string pageSize number projects array commentId string projectId string styleType string branchData boolean components array nextCursor string lastModified string
get_team_projects
annotations: none low

REST. Return all projects in a team.

id string key string url string files array input object cursor string nodeId string output object styles array teamId string fileKey string nodeIds array pageSize number projects array projectId string styleType string branchData boolean components array nextCursor string devResources array lastModified string
get_project_files
annotations: none low

REST. Return all files in a project.

id string key string url string files array cursor string nodeId string output object styles array teamId string fileKey string nodeIds array pageSize number projectId string resources array styleType string branchData boolean components array nextCursor string devResources array lastModified string
get_team_components
annotations: none low

REST. Return team components (cursor-paginated). Pass nextCursor as cursor to fetch the next page.

id string key string url string cursor string nodeId string output object styles array teamId string fileKey string nodeIds array endpoint string pageSize number passcode string resources array styleType string components array nextCursor string devResources array
get_team_styles
annotations: none low

REST. Return team styles (cursor-paginated).

id string url string input object cursor string nodeId string output object sentAt string status string styles array teamId string fileKey string nodeIds array request object endpoint string pageSize number passcode string response object webhooks array resources array webhookId string nextCursor string receivedAt string devResources array errorMessage string
get_dev_resources
annotations: none low

REST. Return dev resources for the file (optionally filtered by node ids).

id string input object output object sentAt string status string teamId string nodeIds array request object endpoint string pageSize number passcode string requests array response object webhooks array resources array webhookId string receivedAt string devResources array errorMessage string
post_dev_resources
annotations: none low

REST. Create dev resources. WRITE — gated behind --enable-write-tools (default off).

id string input object output object sentAt string status string teamId string request object endpoint string pageSize number passcode string requests array response object webhooks array resources array webhookId string receivedAt string devResources array errorMessage string
list_team_webhooks
annotations: none low

REST. Return all webhooks owned by a team (Figma webhooks v2).

ok literal input object output object teamId string endpoint string pageSize number passcode string requests array webhooks array webhookId string
get_webhook
annotations: none low

REST. Return a single webhook by id (Figma webhooks v2).

ok literal input object output object teamId string endpoint string pageSize number passcode string requests array webhookId string
get_webhook_requests
annotations: none low

REST. Return recent delivery attempts for a webhook (Figma webhooks v2).

ok literal input object output object teamId string endpoint string pageSize number passcode string requests array webhookId string
create_webhook
annotations: none low

REST. Create a webhook for the given team + event type. WRITE — gated behind --enable-write-tools (default off).

ok literal input object output object teamId string endpoint string passcode string webhookId string
update_webhook
annotations: none low

REST. Update a webhook's endpoint/passcode/status/description. WRITE — gated behind --enable-write-tools (default off).

ok literal input object output object endpoint string passcode string webhookId string
delete_webhook
annotations: none low

REST. Delete a webhook. WRITE — gated behind --enable-write-tools (default off).

ok literal input object output object webhookId string
create_slide
annotations: none low

Slides-only. Create a slide. By default, appended to the end of the last row. Pass rowIndex/columnIndex to place explicitly.

type literal nodeId string output object skipped boolean slideId string
create_slide_row
annotations: none low

Slides-only. Create a slide row. By default, appended to the end of the slide grid.

type literal color object nodeId string output object skipped boolean slideId string
set_slide_name
annotations: none low

Slides-only. Set the slide's title (the slide's name). Slides have no separate title placeholder; the BaseFrameMixin name IS the title surface.

type literal color object nodeId string output object skipped boolean slideId string
set_slide_skipped
annotations: none low

Slides-only. Toggle whether a slide is skipped during presentation playback (slide.isSkippedSlide). This is the only slide-level metadata flag the plugin API exposes.

type literal color object nodeId string output object skipped boolean slideId string
set_slide_transition
annotations: none low

Slides-only. Set the slide-to-slide transition (style + optional duration, curve, timing).

type literal input object nodeId string output object deleted literal slideId string
set_slide_background
annotations: none low

Slides-only. Set the slide's background to a single SOLID paint (writes through to slide.fills).

type literal input object nodeId string output object rowIds array deleted literal nodeIds array slideId string
move_slide
annotations: none low

Slides-only. Move a slide to (rowIndex, columnIndex). Internally calls figma.setSlideGrid with the mutated grid.

type literal input object nodeId string output object rowIds array deleted literal nodeIds array slideId string
duplicate_slide
annotations: none low

Slides-only. Clone a slide. The duplicate is appended after the source in the same row.

type literal input object nodeId string output object rowIds array deleted literal isFirst boolean nodeIds array slideId string isSkipped boolean
delete_slide
annotations: none low

Slides-only. Remove a slide from the deck.

type literal view enum input object nodeId string output object rowIds array deleted literal isFirst boolean nodeIds array slideId string isSkipped boolean
list_slides
annotations: none low

Slides-only. Enumerate slide ids. With no rowIndex, returns every slide; with a rowIndex, returns just that row's slides.

grid array type literal view enum input object nodeId string output object rowIds array isFirst boolean nodeIds array slideId string isSkipped boolean
list_slide_rows
annotations: none low

Slides-only. Enumerate slide row ids in grid order.

grid array type literal view enum input object nodeId string output object rowIds array isFirst boolean slideId string isSkipped boolean
set_active_slide
annotations: none low

Slides-only. Focus a slide (writes figma.currentPage.focusedSlide). Note: the plugin API has no scrollAndZoomIntoSlide; assigning focusedSlide is the only way to programmatically focus a slide.

grid array type literal view enum input object nodeId string output object isFirst boolean slideId string isSkipped boolean
get_slide
annotations: none low

Slides-only. Return a structured summary of a slide: name, isSkipped, transition, isFirst.

grid array type literal view enum input object nodeId string output object isFirst boolean slideId string isSkipped boolean
set_slides_view
annotations: none low

Slides-only. Toggle the editor viewport mode. 'grid' shows the whole grid; 'single-slide' zooms in on the focused slide.

grid array view enum input object output object
get_slide_grid
annotations: none low

Slides-only. Return the full slide grid as a 2D array of slide ids (outer index = row).

grid array input object output object
get_console_logs
annotations: none low

Return recent console entries from the Figma plugin sandbox (all levels).

log number info number warn number error number input object limit number total number output object byLevel object cleared number entries array pattern string droppedCount number
clear_console
annotations: none low

Clear the captured console buffer; returns how many entries were dropped.

log number info number warn number error number input object limit number total number output object byLevel object cleared number entries array pattern string droppedCount number
get_console_errors
annotations: none low

Return recent console entries at level=error only.

log number info number warn number error number input object limit number total number output object byLevel object entries array pattern string droppedCount number
get_console_warnings
annotations: none low

Return recent console entries at level=warn only.

log number info number warn number error number input object limit number total number output object byLevel object entries array pattern string droppedCount number
query_console
annotations: none low

Filter captured console entries by JS regex on the message text. Pattern compiled with no flags. Pattern is capped at 200 chars; each message is truncated to its first 1000 chars before matching to bound worst-case backtracking.

log number info number warn number error number input object limit number total number output object byLevel object entries array pattern string droppedCount number
console_status
annotations: none low

Report buffer statistics: total, per-level counts, and dropped (overflowed) count.

log number info number warn number error number input object total number output object byLevel object droppedCount number
echo
annotations: none low

echo

msg string input object output object
hello
annotations: none low

say hi

input object output object greeting string
ping
annotations: none low

ping

ok literal input object output object
plugin_echo
annotations: none low

uses figma adapter

input object output object editorType string
boom
annotations: none low

throws a plain Error

ok boolean msg string input object output object
slow
annotations: none low

blocks until external resolution

msg string input object output object
plugin_ping
annotations: none low

ping over the WS plugin

ok literal input object output object

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, ws
filesystem low
Server uses filesystem capabilities via: fs/promises, open(), os, pathlib, tempfile
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 246

medium
Excessive dependency count: 108 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
low
Tool 'audit_contrast' has no annotations annotation_checker · 100%
low
Tool 'audit_target_size' has no annotations annotation_checker · 100%
low
Tool 'simulate_color_blindness' has no annotations annotation_checker · 100%
low
Tool 'set_alt_text' has no annotations annotation_checker · 100%
low
Tool 'get_alt_text' has no annotations annotation_checker · 100%
low
Tool 'set_aria_label' has no annotations annotation_checker · 100%
low
Tool 'get_aria_label' has no annotations annotation_checker · 100%
low
Tool 'set_landmark_role' has no annotations annotation_checker · 100%
low
Tool 'get_landmark_role' has no annotations annotation_checker · 100%
low
Tool 'list_annotations' has no annotations annotation_checker · 100%
low
Tool 'add_annotation' has no annotations annotation_checker · 100%
low
Tool 'remove_annotation' has no annotations annotation_checker · 100%
low
Tool 'audit_a11y_summary' has no annotations annotation_checker · 100%
low
Tool 'create_sticky' has no annotations annotation_checker · 100%
low
Tool 'create_section' has no annotations annotation_checker · 100%
low
Tool 'create_connector' has no annotations annotation_checker · 100%
low
Tool 'create_code_block' has no annotations annotation_checker · 100%
low
Tool 'create_shape_with_text' has no annotations annotation_checker · 100%
low
Tool 'create_table' has no annotations annotation_checker · 100%
low
Tool 'set_sticky_content' has no annotations annotation_checker · 100%
low
Tool 'set_section_name' has no annotations annotation_checker · 100%
low
Tool 'move_into_section' has no annotations annotation_checker · 100%
low
Tool 'list_section_children' has no annotations annotation_checker · 100%
low
Tool 'extract_styles' has no annotations annotation_checker · 100%
low
Tool 'import_variables' has no annotations annotation_checker · 100%
low
Tool 'export_variables' has no annotations annotation_checker · 100%
low
Tool 'update_variables_batch' has no annotations annotation_checker · 100%
low
Tool 'stream_status' has no annotations annotation_checker · 100%
low
Tool 'create_rectangle' has no annotations annotation_checker · 100%
low
Tool 'create_frame' has no annotations annotation_checker · 100%
low
Tool 'create_ellipse' has no annotations annotation_checker · 100%
low
Tool 'create_line' has no annotations annotation_checker · 100%
low
Tool 'create_text' has no annotations annotation_checker · 100%
low
Tool 'set_text_content' has no annotations annotation_checker · 100%
low
Tool 'set_fill' has no annotations annotation_checker · 100%
low
Tool 'set_stroke' has no annotations annotation_checker · 100%
low
Tool 'resize_node' has no annotations annotation_checker · 100%
low
Tool 'clone_node' has no annotations annotation_checker · 100%
low
Tool 'delete_node' has no annotations annotation_checker · 100%
low
Tool 'create_component' has no annotations annotation_checker · 100%
low
Tool 'extract_components' has no annotations annotation_checker · 100%
low
Tool 'extract_local_variables' has no annotations annotation_checker · 100%
low
Tool 'bridge_status' has no annotations annotation_checker · 100%
low
Tool 'get_file_metadata' has no annotations annotation_checker · 100%
low
Tool 'get_file_pages' has no annotations annotation_checker · 100%
low
Tool 'get_node_by_id' has no annotations annotation_checker · 100%
low
Tool 'get_file_versions' has no annotations annotation_checker · 100%
low
Tool 'get_file_styles' has no annotations annotation_checker · 100%
low
Tool 'get_file_components' has no annotations annotation_checker · 100%
low
Tool 'get_file_component_sets' has no annotations annotation_checker · 100%
low
Tool 'get_file_branches' has no annotations annotation_checker · 100%
low
Tool 'get_image_renders' has no annotations annotation_checker · 100%
low
Tool 'get_image_fills' has no annotations annotation_checker · 100%
low
Tool 'get_user_me' has no annotations annotation_checker · 100%
low
Tool 'get_file_comments' has no annotations annotation_checker · 100%
low
Tool 'post_file_comment' has no annotations annotation_checker · 100%
low
Tool 'delete_file_comment' has no annotations annotation_checker · 100%
low
Tool 'get_team_projects' has no annotations annotation_checker · 100%
low
Tool 'get_project_files' has no annotations annotation_checker · 100%
low
Tool 'get_team_components' has no annotations annotation_checker · 100%
low
Tool 'get_team_styles' has no annotations annotation_checker · 100%
low
Tool 'get_dev_resources' has no annotations annotation_checker · 100%
low
Tool 'post_dev_resources' has no annotations annotation_checker · 100%
low
Tool 'list_team_webhooks' has no annotations annotation_checker · 100%
low
Tool 'get_webhook' has no annotations annotation_checker · 100%
low
Tool 'get_webhook_requests' has no annotations annotation_checker · 100%
low
Tool 'create_webhook' has no annotations annotation_checker · 100%
low
Tool 'update_webhook' has no annotations annotation_checker · 100%
low
Tool 'delete_webhook' has no annotations annotation_checker · 100%
low
Tool 'create_slide' has no annotations annotation_checker · 100%
low
Tool 'create_slide_row' has no annotations annotation_checker · 100%
low
Tool 'set_slide_name' has no annotations annotation_checker · 100%
low
Tool 'set_slide_skipped' has no annotations annotation_checker · 100%
low
Tool 'set_slide_transition' has no annotations annotation_checker · 100%
low
Tool 'set_slide_background' has no annotations annotation_checker · 100%
low
Tool 'move_slide' has no annotations annotation_checker · 100%
low
Tool 'duplicate_slide' has no annotations annotation_checker · 100%
low
Tool 'delete_slide' has no annotations annotation_checker · 100%
low
Tool 'list_slides' has no annotations annotation_checker · 100%
low
Tool 'list_slide_rows' has no annotations annotation_checker · 100%
low
Tool 'set_active_slide' has no annotations annotation_checker · 100%
low
Tool 'get_slide' has no annotations annotation_checker · 100%
low
Tool 'set_slides_view' has no annotations annotation_checker · 100%
low
Tool 'get_slide_grid' has no annotations annotation_checker · 100%
low
Tool 'get_console_logs' has no annotations annotation_checker · 100%
low
Tool 'clear_console' has no annotations annotation_checker · 100%
low
Tool 'get_console_errors' has no annotations annotation_checker · 100%
low
Tool 'get_console_warnings' has no annotations annotation_checker · 100%
low
Tool 'query_console' has no annotations annotation_checker · 100%
low
Tool 'console_status' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'hello' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'plugin_echo' has no annotations annotation_checker · 100%
low
Tool 'boom' has no annotations annotation_checker · 100%
low
Tool 'slow' has no annotations annotation_checker · 100%
low
Tool 'plugin_ping' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: turbo@2.9.6 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.9.6 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-9qr9-h5gf-34mp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.0 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.0 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.0 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.0 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: add_annotation manifest_parser · 75%
info
Tool: list_section_children manifest_parser · 75%
info
Tool: audit_contrast manifest_parser · 75%
info
Tool: audit_target_size manifest_parser · 75%
info
Tool: simulate_color_blindness manifest_parser · 75%
info
Tool: set_alt_text manifest_parser · 75%
info
Tool: get_alt_text manifest_parser · 75%
info
Tool: set_aria_label manifest_parser · 75%
info
Tool: get_aria_label manifest_parser · 75%
info
Tool: set_landmark_role manifest_parser · 75%
info
Tool: get_landmark_role manifest_parser · 75%
info
Tool: list_annotations manifest_parser · 75%
info
Tool: remove_annotation manifest_parser · 75%
info
Tool: audit_a11y_summary manifest_parser · 75%
info
Tool: create_sticky manifest_parser · 75%
info
Tool: create_section manifest_parser · 75%
info
Tool: create_connector manifest_parser · 75%
info
Tool: create_code_block manifest_parser · 75%
info
Tool: create_shape_with_text manifest_parser · 75%
info
Tool: create_table manifest_parser · 75%
info
Tool: set_sticky_content manifest_parser · 75%
info
Tool: set_section_name manifest_parser · 75%
info
Tool: move_into_section manifest_parser · 75%
info
Tool: extract_styles manifest_parser · 75%
info
Tool: import_variables manifest_parser · 75%
info
Tool: export_variables manifest_parser · 75%
info
Tool: update_variables_batch manifest_parser · 75%
info
Tool: stream_status manifest_parser · 75%
info
Tool: create_rectangle manifest_parser · 75%
info
Tool: create_frame manifest_parser · 75%
info
Tool: create_ellipse manifest_parser · 75%
info
Tool: create_line manifest_parser · 75%
info
Tool: create_text manifest_parser · 75%
info
Tool: set_text_content manifest_parser · 75%
info
Tool: set_fill manifest_parser · 75%
info
Tool: set_stroke manifest_parser · 75%
info
Tool: resize_node manifest_parser · 75%
info
Tool: clone_node manifest_parser · 75%
info
Tool: delete_node manifest_parser · 75%
info
Tool: create_component manifest_parser · 75%
info
Tool: extract_components manifest_parser · 75%
info
Tool: extract_local_variables manifest_parser · 75%
info
Tool: bridge_status manifest_parser · 75%
info
Tool: get_file_metadata manifest_parser · 75%
info
Tool: delete_webhook manifest_parser · 75%
info
Tool: get_file_pages manifest_parser · 75%
info
Tool: get_node_by_id manifest_parser · 75%
info
Tool: get_file_versions manifest_parser · 75%
info
Tool: get_file_styles manifest_parser · 75%
info
Tool: get_file_components manifest_parser · 75%
info
Tool: get_file_component_sets manifest_parser · 75%
info
Tool: get_file_branches manifest_parser · 75%
info
Tool: hello manifest_parser · 75%
info
Tool: get_image_renders manifest_parser · 75%
info
Tool: get_image_fills manifest_parser · 75%
info
Tool: get_user_me manifest_parser · 75%
info
Tool: get_file_comments manifest_parser · 75%
info
Tool: post_file_comment manifest_parser · 75%
info
Tool: delete_file_comment manifest_parser · 75%
info
Tool: get_team_projects manifest_parser · 75%
info
Tool: update_webhook manifest_parser · 75%
info
Tool: get_project_files manifest_parser · 75%
info
Tool: get_team_components manifest_parser · 75%
info
Tool: get_team_styles manifest_parser · 75%
info
Tool: get_dev_resources manifest_parser · 75%
info
Tool: post_dev_resources manifest_parser · 75%
info
Tool: list_team_webhooks manifest_parser · 75%
info
Tool: get_webhook manifest_parser · 75%
info
Tool: get_webhook_requests manifest_parser · 75%
info
Tool: create_webhook manifest_parser · 75%
info
Tool: create_slide manifest_parser · 75%
info
Tool: create_slide_row manifest_parser · 75%
info
Tool: set_slide_name manifest_parser · 75%
info
Tool: set_slide_skipped manifest_parser · 75%
info
Tool: set_slide_transition manifest_parser · 75%
info
Tool: set_slide_background manifest_parser · 75%
info
Tool: move_slide manifest_parser · 75%
info
Tool: duplicate_slide manifest_parser · 75%
info
Tool: delete_slide manifest_parser · 75%
info
Tool: list_slides manifest_parser · 75%
info
Tool: list_slide_rows manifest_parser · 75%
info
Tool: ping manifest_parser · 75%
info
Tool: set_active_slide manifest_parser · 75%
info
Tool: get_slide manifest_parser · 75%
info
Tool: set_slides_view manifest_parser · 75%
info
Tool: get_slide_grid manifest_parser · 75%
info
Tool: get_console_logs manifest_parser · 75%
info
Tool: clear_console manifest_parser · 75%
info
Tool: get_console_errors manifest_parser · 75%
info
Tool: get_console_warnings manifest_parser · 75%
info
Tool: query_console manifest_parser · 75%
info
Tool: console_status manifest_parser · 75%
info
Tool: echo manifest_parser · 75%
info
Tool: plugin_echo manifest_parser · 75%
info
Tool: boom manifest_parser · 75%
info
Tool: slow manifest_parser · 75%
info
Tool: plugin_ping manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 85 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%