Figma Context MCP
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
作者提供的说明(英文原文)
30+ deterministic dev and delivery tools: linting, metrics, diagrams, model advice, AI-text checks.
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
Authorization标为机密的值是你账户的钥匙。千万不要分享给别人,也不要粘贴到聊天里。
你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
这个地址需要在请求的 header 中放入密钥,而添加连接器的菜单无法设置。请改用 Claude Code、Cursor 或 VS Code。
在终端中运行这条命令
claude mcp add --transport http api https://api.quasslabs.com/mcp --header 'Authorization: your-value'运行前请先填写空着的值。
粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"api": {
"url": "https://api.quasslabs.com/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"api": {
"type": "http",
"url": "https://api.quasslabs.com/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
这个地址需要在请求的 header 中放入密钥,而添加连接器的菜单无法设置。请改用 Claude Code、Cursor 或 VS Code。
你的选择通过 Cookie 保存在这台设备上,无需账户。
Authorization 机密 HTTP header这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
工具名称和描述与服务器在 2026年11月8日 报告的完全一致。这些内容由作者撰写,不是我们写的;我们以纯文本形式显示。
alignment_gateRun an AI system prompt (and optional agent config) through a 45-criterion alignment/safety rubric. Returns a letter grade (A-F), numeric score, per-flag remediation, and a pass/fail verdict.
blm_land_lookupLook up Bureau of Land Management land status for a US coordinate: BLM ownership, jurisdiction, allowed activities (rockhounding, camping), permit requirements, and special designations (ACEC, Wilderness, WSA, NM/NCA).
diagram_contrastDiagram quality QA. Catch and fix the things that ruin diagrams: (1) unreadable label contrast - POST a mermaid/SVG or HTML diagram, get every WCAG-AA failure (incl. mermaid -block label colors, with unresolvable fills flagged honestly, not false-passed) + auto-corrected colors;
humanizer_scoreDetect AI-writing tells in text. POST prose and get a 0-1 ai_ness score + band (low/medium/high) + the EXACT patterns that fired (AI vocabulary, significance inflation, promotional language, filler phrases, negative parallelism, rule-of-three, em-dash overuse) with sample spans.
saas_metricsSaaS health advisor. POST your MRR/customers (+ optional churn/CAC/margin/growth) and get ARR/ARPA/LTV/CAC/payback/Rule-of-40/NRR/GRR computed, each with a health tag, plus an overall grade + a ranked "what to fix first" focus list. Deterministic math + advisory, no LLM.
acceptance_criteria_validatorQA advisor: validate acceptance criteria quality. POST a list of AC (or a story) and get per-AC problems (vague/untestable, non-atomic, no observable outcome) + a missing-coverage flag if there is no failure-path AC, plus a 0-100 score and pass/needs_work verdict. Tells you exact
coverage_checkScope-completeness advisor. POST a brief (or requirements[]) + your stories[] and get a coverage score + the gaps (requirements no story covers), orphan stories (possible scope creep), and missing structural buckets (auth/CRUD/error-states/tests). Tells you what the scope is miss
defect_triageBug-triage advisor. POST one bug report (or a list) and get severity (critical/high/medium/low), category, whether it has repro steps, and what info is missing (no repro / no expected-vs-actual / no environment). For a list: priority ranking + likely-duplicate clusters. Determini
model_advisorLLM selection + cost advisor. POST a task description (+ optional volume/tokens/constraints like local-only or cheap) and get a recommended model + fallback chain + do-not-use (with reasons), the complexity tier, and per-run + monthly cost. A maintained model+price catalog. Deter
tool_advisorWhich QL-API endpoint fits this task. POST a task description and get the ranked endpoint(s) that best match, each with a confidence label (high/medium/low). Deterministic keyword matching over this platform's own endpoint catalog, no LLM. Pairs with model_advisor (which itself i
humanize_textRewrite text to remove AI-writing tells. POST prose and get it back with the mechanical tells fixed (AI vocabulary swapped for plain words, filler phrases stripped, em-dash overuse reduced, significance inflation deflated) plus a change log, before/after ai-ness scores, and a res
dependency_checkLint dependency manifests for hygiene: unpinned, wildcard or unbounded versions, missing lockfiles, git/URL deps, non-https indexes, install scripts, dependency-confusion names, plus a small static snapshot of famous compromised versions (not a live CVE feed). Use this for a few
log_audit_creatorGenerate a concrete audit-logging spec for an app. POST your feature list (and optional compliance targets: soc2/hipaa/gdpr/pci) and get a full audit-event catalog (namespaced event names, actor/target/required fields, PII flags, retention), a canonical event envelope schema, a s
log_analyzerAnalyze a log file. POST raw log text (or an upload_id from the create_upload tool, up to 5MB) and get: level breakdown + time range, error clusters (messages normalized so variable ids/numbers collapse into one signature, with counts + first/last seen + a sample), a timeline, de
ticket_lintFull Jira-ticket quality linter (whole ticket, not just AC - use acceptance_criteria_validator for the deep AC pass). POST one ticket or a batch (max 50) and get per-ticket findings with severity + concrete fixes: missing/weak summary or description, missing AC or estimate, bugs
story_lintDeterministic structural quality linter for user stories - a sibling to ticket_lint but scoped to story-writing concepts any team recognizes: narrative completeness (As-a/I-want-to/So-that/Summary), acceptance criteria presence, duplicate/unknown dependency IDs, a "Manage X" stor
estimate_sanityDeterministic classifier for story/task hour estimates against benchmarks: flags each estimate in_range, borderline, over, under, or unbenchmarked. Supply either an explicit {min, max} range per type (benchmarks) or a list of historical actual hours per type (historical) that thi
pr_description_lintDeterministic PR description quality linter: flags a missing/too-short body, absent test evidence, absent stated rationale, an unstructured long body, and - only for PRs that look like bugfixes (title prefix fix/bug/hotfix/patch, or an explicit is_bugfix flag) - missing repro ste
commit_hygieneDeterministic commit-message hygiene checker: conventional-commit format, vague-subject detection, subject-length limit, a same-message secret-pattern scan (AWS keys, private key headers, Slack/GitHub tokens, inline password=/secret= style credentials - checked against the messag
readability_gradeDeterministic Flesch Reading Ease and Flesch-Kincaid Grade Level for a block of text, plus word/sentence/syllable counts and a plain-language reading-ease band (very_easy through very_confusing). Syllable counting is the standard vowel-group heuristic (same approximation used by
regex_lintStatic safety analysis of a regular expression plus an English explanation of what it matches. Parses the pattern into an AST and flags the structures that cause catastrophic backtracking (ReDoS): nested unbounded quantifiers like (a+)+, repeated alternations whose branches can s
mcp_tool_lint 看起来像是对 AI 下的指令Static review of MCP tool definitions, as returned by a server's tools/list, for how well a model can choose and call them. Flags missing, too-short or vague descriptions; parameters with no description or type; free-form objects and arrays without items; required fields that are
openapi_diffCompares a base and a head OpenAPI 3.x spec (JSON object, or a JSON or YAML string) from the API consumer's point of view and lists what would break existing clients: removed operations or 2xx responses, new required parameters or request properties, optional-to-required changes,
sprint_healthSprint/delivery health advisor. POST 1-24 sprints (committed/completed points, optional per-ticket estimate-vs-actual data) and get computed metrics each with a good/warn/bad health tag: velocity avg + trend + stability, commitment reliability, spillover rate, mid-sprint scope ch
worklog_guardrailWorklog/timesheet policy checker - run a batch of worklog entries through configurable guardrails BEFORE posting them to a time-tracking system. Checks: rounding increment (default 0.25h, float-safe), per-entry min/max, per-author daily totals, duplicates, over-estimate alerts (n
create_uploadGet a presigned S3 PUT URL to upload a file (policy doc, config, log, up to 5MB) that a file-ingesting endpoint then reads by upload_id. Two-step: call this, PUT your file to the returned url, then pass upload_id to the consuming endpoint. Uploads auto-expire in 1 day and are rea
send_feedbackSubmit free-text feedback about the API - a bug, an idea, a docs gap, a billing question, or anything else. Missing a tool? Use kind tool_request to tell us what you needed, with an optional tool_description. Tied to your key so we can follow up, but not a support-ticket SLA. Aut
accountEverything about your QuassLabs API account, chosen by `action`. Free: no action costs credits. "signup" (no API key needed): request a free key for an email address. A confirmation link is emailed; a human opens it on quasslabs.com to see the key, which is never returned to the
rate_callRate a specific prior metered call - thumbs up or down, plus an optional comment - keyed by the request_id that call's response reported. Works for any metered tool, so you can tell us when a result was wrong, unhelpful, or missed something. Resubmitting the same request_id overw
supply_chain_scanScan a whole repo archive (a ZIP of manifests, lockfiles and MCP server configs) for packages, MCP servers and extensions listed in a known-compromise catalog (Bumblebee threat intel). Use this for a repo, many lockfiles or MCP configs; use dependency_check instead to lint a few
describe_diagramTurn a plain-English description into Mermaid diagram source. Describe the flow, system, schema or timeline you want ("a login flow with an OAuth branch and a failure path") and get back complete, valid Mermaid - no need to know the syntax. The mermaid field of the response is di
convert_diagramMake Mermaid diagrams portable. Takes HTML containing blocks (or a raw Mermaid source) and returns the same document with every diagram pre-rendered to inline SVG and the Mermaid CDN runtime stripped. A CDN-backed diagram only renders if the reader can fetch and run the runtime;
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月9日
注册名称已通过域名 quasslabs.com 验证(注册中心会核实域名所有权)
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
在 668 毫秒内响应(HTTP 200)
无需登录
有 1 个工具描述包含看起来像是对 AI 下指令的文字。安装前请先阅读下方的内容
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 3 项适用的基础检查中通过了 2 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
你需要填写:Authorization
它在作者的云端运行。通过互联网连接,无需安装,但你发送的内容会经过作者的服务器。
GitHub 仓库最后更新于–,最新版本(0.3.0)于昨天进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接,所以接受远程 MCP 服务器的应用也可以使用,例如开启开发者模式的 ChatGPT。
同一分类中有:Figma Context MCP, Claude Real Video, Figma MCP Server
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:↓ 每周下载量i★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
Let any LLM watch a video locally — and search everything it has ever watched.
The Figma MCP server brings Figma design context directly into your AI workflow.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
32 deterministic developer and delivery tools over one authenticated MCP endpoint. No LLM in the loop for most of them: they are scorers, linters, validators and calculators, so results are reproducible and cheap. Covers prompt-safety grading, AI-writing detection and rewriting, LLM selection and cost advice, ticket/story/PR/commit linting, sprint and SaaS metrics, log analysis, dependency hygiene and supply-chain scanning, MCP tool linting, Mermaid diagram generation and offline rendering, and BLM land lookup.
Endpoint: https://api.quasslabs.com/mcp · Transport: streamable HTTP (stateless JSON-RPC 2.0) · Server version: 0.2.0
Documentation: https://docs.quasslabs.com
Every client sends the same thing: a Bearer qlk_... API key in the Authorization header. Hosts that reserve Authorization for themselves can send X-API-Key: qlk_... instead.
Claude Code
claude mcp add --transport http quasslabs https://api.quasslabs.com/mcp \
--header "Authorization: Bearer qlk_YOUR_KEY"
Cursor (~/.cursor/mcp.json, or .cursor/mcp.json in a project)
{
"mcpServers": { "quasslabs": { "url": "https://api.quasslabs.com/mcp", "headers": { "Authorization": "Bearer qlk_YOUR_KEY" } } } }
Any other client that supports streamable HTTP
{
"mcpServers": { "quasslabs": { "type": "http", "url": "https://api.quasslabs.com/mcp", "headers": { "Authorization": "Bearer qlk_YOUR_KEY" } } } }
Or call it directly:
curl -sS -X POST https://api.quasslabs.com/mcp \
-H 'Content-Type: application/json' \ -H 'Authorization: Bearer qlk_YOUR_KEY' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"account","arguments":{"action":"balance"}}}'
Getting a key. Sign up at https://quasslabs.com/api, or from inside an agent with the account tool (action: "signup", no key needed). Either way you get an email with a one-time link, and the key is shown on quasslabs.com, never in the agent transcript. Every key gets 300 free credits each month.
initialize, tools/list and ping are unauthenticated, so any client or registry can discover the catalogue without credentials. tools/call requires the API key, except the account tool's signup and checkout_status actions. Keys are stored only as a SHA-256 hash, so a lost key cannot be recovered, only revoked and reissued.
Prepaid credits, 1 credit = $0.01:
| Pack | Price | Credits |
|---|---|---|
| Starter | $5 | 500 |
| Pro | $20 | 2,500 |
Buy a pack from inside an agent with the account tool (action: "buy_credits" returns a Stripe Checkout link for a human to pay), and check what is left with action: "balance". Each key's free monthly credits are spent before purchased credits and refill on the first day of each UTC month.
Failed calls are not billed: a call rejected before the tool runs (bad input, missing key, rate limit, insufficient credits) costs nothing, and a call that fails on our side (any 5xx) is refunded automatically. That includes supply_chain_scan archives that download but are rejected (not a ZIP, an unsafe path, too many entries, or too large once extracted): the archive is checked before anything is charged. A convert_diagram call whose diagrams all fail to render (422 mermaid_render_failed) or whose output is over the size limit (413 output_too_large) is refunded too.
Credits are per successful call. Tools marked 0 are free but still need a key.
| Tool | Credits | What it does |
|---|---|---|
alignment_gate | 35 | Grade an AI system prompt against a 45-criterion alignment/safety rubric: letter grade, per-flag remediation, pass/fail |
humanizer_score | 0 | 0-1 AI-ness score plus the exact patterns that fired |
humanize_text | 1 | Rewrite prose to strip mechanical AI-writing tells |
readability_grade | 0 | Flesch Reading Ease and Flesch-Kincaid Grade Level with a plain-language band |
| Tool | Credits | What it does |
|---|---|---|
model_advisor | 0 | Recommended model, fallback chain, do-not-use list, and a cost comparison for a task |
tool_advisor | 0 | Which of these tools fits a task, ranked with a confidence label and the MCP tool name to call |
dependency_check | 0 | Lint pasted dependency manifests for hygiene: pinning, lockfiles, insecure sources, install scripts, dependency confusion |
supply_chain_scan | 5 | Scan a whole repo ZIP (manifests, lockfiles, MCP server configs) against a known-compromise catalog |
log_analyzer | 5 | Level breakdown, time range, and normalized error clusters from a raw log file (up to 5MB) |
log_audit_creator | 5 | Feature list in, concrete audit-event catalog out, optionally targeted at SOC2/HIPAA/GDPR/PCI |
regex_lint | 1 | ReDoS risk analysis plus a plain-English explanation of a regular expression; compiles the pattern but never runs it |
mcp_tool_lint | 1 | Lint MCP tool definitions for model usability: vague descriptions, untyped parameters, near-duplicates, missing annotations, tool-poisoning phrases |
openapi_diff | 1 | Breaking-change report between two OpenAPI 3.x specs (JSON or YAML), with the semver bump it needs |
| Tool | Credits | What it does |
|---|---|---|
ticket_lint | 1 | Whole-ticket quality linter with severity-coded findings, batched up to 50 |
story_lint | 1 | User-story structure: narrative completeness, atomicity, testability |
acceptance_criteria_validator | 1 | Per-AC problems: vague/untestable, non-atomic, no observable outcome, missing coverage |
coverage_check | 1 | Requirements-vs-stories coverage score, gaps, and orphan stories (scope creep) |
defect_triage | 1 | Bug severity, category, repro-step presence, and what information is missing |
sprint_health | 1 | 1-24 sprints in, health-tagged delivery metrics out |
worklog_guardrail | 1 | Run timesheet entries through configurable policy guardrails before posting them |
estimate_sanity | 1 | Classify story/task hour estimates against benchmarks: in-range, borderline, over, under |
pr_description_lint | 1 | Missing body, absent test evidence, absent rationale, unstructured long body |
commit_hygiene | 1 | Conventional-commit format, vague subjects, length limits, and a secret-pattern scan |
| Tool | Credits | What it does |
|---|---|---|
describe_diagram | 5 | Plain-English description in, Mermaid diagram source out |
convert_diagram | 1 | Pre-render Mermaid to inline SVG so HTML works offline, in email, and in PDF exports |
diagram_contrast | 0 | Diagram QA: every WCAG-AA label-contrast failure in a Mermaid/SVG/HTML diagram, with fixes |
| Tool | Credits | What it does |
|---|---|---|
saas_metrics | 0 | ARR/ARPA/LTV/CAC/payback/Rule-of-40/NRR/GRR computed and health-tagged, plus an overall grade |
blm_land_lookup | 8 | BLM land status for a US coordinate: ownership, allowed activities, permit requirements, special designations |
| Tool | Credits | What it does |
|---|---|---|
account | 0 | One tool for your account. action: signup (email a one-time key link, no key needed), balance (credits, free credits left, reset date), buy_credits (Stripe Checkout link: $5 / 500 or $20 / 2,500), checkout_status (did a purchase land) |
create_upload | 0 | Presigned S3 PUT URL so file-ingesting tools can read a document by upload_id |
send_feedback | 0 | Submit a bug, idea, or docs gap against your key. Missing a tool? Send kind: "tool_request" |
rate_call | 0 | Thumbs up/down a prior metered call by its request_id |
tools/list only ever advertises what is callable right now. compress (LLMLingua-2 prompt compression, 10 credits) is built but temporarily switched off, so it is not listed.
humanize is now humanize_text, uploads is now create_upload, and feedback is now send_feedback. The REST endpoints (/v1/humanize, /v1/uploads, /v1/feedback) did not change.
This repository is the public manifest for the QuassLabs API MCP server: the registry entry, the tool catalogue, and connection instructions. The server is a hosted remote endpoint, so there is nothing to install and no server source here. The platform implementation is a commercial product and is not open source.
Report a problem with the MCP server through the send_feedback tool (free), or see SECURITY.md for security reports.