Figma Context MCP
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
Description from the maker (original English)
Process video, audio, images and documents with Transloadit Robots. Connect by URL with OAuth.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
TRANSLOADIT_KEY, TRANSLOADIT_SECRETValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://api2.transloadit.com/mcpOpen Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"transloadit": {
"command": "npx",
"args": [
"-y",
"@transloadit/mcp-server",
"stdio"
],
"env": {
"TRANSLOADIT_KEY": "your-value",
"TRANSLOADIT_SECRET": "your-value"
}
}
}
}Run this in your terminal
claude mcp add --transport http transloadit https://api2.transloadit.com/mcpclaude mcp add transloadit --env TRANSLOADIT_KEY=your-value --env TRANSLOADIT_SECRET=your-value -- npx -y @transloadit/mcp-server stdioFill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"transloadit": {
"url": "https://api2.transloadit.com/mcp"
}
}
}Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"transloadit": {
"command": "npx",
"args": [
"-y",
"@transloadit/mcp-server",
"stdio"
],
"env": {
"TRANSLOADIT_KEY": "your-value",
"TRANSLOADIT_SECRET": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"transloadit": {
"type": "http",
"url": "https://api2.transloadit.com/mcp"
}
}
}Paste into .vscode/mcp.json in your project
{
"servers": {
"transloadit": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@transloadit/mcp-server",
"stdio"
],
"env": {
"TRANSLOADIT_KEY": "your-value",
"TRANSLOADIT_SECRET": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://api2.transloadit.com/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
The server asks you to sign in before it lists its tools.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified with the GitHub account transloadit, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Responded in 434 ms (HTTP 401)
Declares OAuth sign-in, so your AI app can take you to log in
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: TRANSLOADIT_KEY, TRANSLOADIT_SECRET
Either way works: install it on your computer or connect to the cloud version.
The GitHub repo last changed –, and the latest version (0.8.6) reached the registry yesterday.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Figma Context MCP, Claude Real Video, Figma MCP Server
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
Let any LLM watch a video locally — and search everything it has ever watched.
Figma’s official server gives AI your design data so it can turn designs into code or describe them accurately. Connects to Figma’s cloud.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Transloadit MCP Server (Streamable HTTP + stdio), built on top of @transloadit/node.
The hosted server lives at:
https://api2.transloadit.com/mcp
Add it to your MCP client by URL. The client discovers API2 as the OAuth authorization server, opens a browser consent page in the Transloadit Console, and keeps a short-lived token plus refresh token for you. No API keys leave your Workspace.
The hosted endpoint asks you to sign in before any tool runs, Robot docs and linting included, because MCP clients only start OAuth when the endpoint challenges them. Robot docs and linting ask for no scopes. To use them without an account, run the server yourself (see Self-hosted).
claude mcp add --transport http transloadit https://api2.transloadit.com/mcp
claude mcp login transloadit
For non-interactive runs (for example claude -p), explicitly allow MCP tools:
claude -p "List templates" \
--allowedTools mcptransloadit* \ --output-format json
Settings → Connectors → Add custom connector → enter https://api2.transloadit.com/mcp. Claude registers itself with API2 and opens the consent page.
Settings → Apps & Connectors → Advanced → Developer mode → Create, then enter the URL above with authentication set to OAuth. Files you attach in the chat are handed to transloadit_create_assembly as attachments; results render in the Assembly result widget.
The plugin manifest for the ChatGPT and Codex catalog (plugin.json, mcp.json and the .codex-plugin/plugin.json fallback) lives in this package directory. It points at the hosted server and at the Agent Skills catalog at https://transloadit.com/.well-known/skills/index.json instead of bundling skill files.
codex mcp add transloadit --url https://api2.transloadit.com/mcp
Codex opens the consent page right away. To sign in again later, run codex mcp login transloadit.
Or in ~/.codex/config.toml:
[mcp_servers.transloadit]
url = "https://api2.transloadit.com/mcp"
~/.cursor/mcp.json:
{
"mcpServers": { "transloadit": { "url": "https://api2.transloadit.com/mcp" } } }
npx @modelcontextprotocol/inspector --cli https://api2.transloadit.com/mcp
Where no browser is available, mint a bearer token from an Auth Key and pass it as Authorization: Bearer :
npx -y @transloadit/node auth token --aud mcp
Generate this token in a trusted environment (backend, CI, or local shell), then hand it to the agent runtime. You can mint it via:
npx -y @transloadit/node auth token --aud mcpPOST https://api2.transloadit.com/token (HTTP Basic Auth with key/secret)Transloadit with authKey + authSecret, then call client.mintBearerToken({ aud: 'mcp' })Interactive CLI sessions can also run npx -y @transloadit/node auth login (device flow) and reuse the stored credentials.
Bearer tokens satisfy signature auth on API2 requests; signature checks apply to key/secret requests.
Run the server where your agent runs, set TRANSLOADIT_KEY and TRANSLOADIT_SECRET, and the server handles API auth automatically.
npm install @transloadit/mcp-server
TRANSLOADIT_KEY=MY_AUTH_KEY TRANSLOADIT_SECRET=MY_SECRET_KEY npx -y @transloadit/mcp-server stdio
Auth Keys sign with one HMAC algorithm. Keys created in the Console with "Allow signing Smart CDN URLs" (the default) require sha256, so add TRANSLOADIT_SIGNATURE_ALGORITHM=sha256, as the Console's snippet for the key shows. Other keys use the default sha384. A mismatch fails with mcp_invalid_signature, and its hint names the algorithm the key requires.
TRANSLOADIT_KEY=MY_AUTH_KEY TRANSLOADIT_SECRET=MY_SECRET_KEY \
npx -y @transloadit/mcp-server http --host 127.0.0.1 --port 5723
When binding HTTP mode to non-localhost hosts, TRANSLOADIT_MCP_TOKEN (or the hosted-mode TRANSLOADIT_MCP_RESOURCE_METADATA_URL) is required.
docker run -i --rm \
-e TRANSLOADIT_KEY=MY_AUTH_KEY \ -e TRANSLOADIT_SECRET=MY_SECRET_KEY \ ghcr.io/transloadit/mcp-server:latest
For HTTP mode via Docker, override the stdio entrypoint, expose the port, and set a transport token, which binding to 0.0.0.0 requires:
export TRANSLOADIT_MCP_TOKEN="$(openssl rand -hex 32)"
docker run --rm \ -e TRANSLOADIT_KEY=MY_AUTH_KEY \ -e TRANSLOADIT_SECRET=MY_SECRET_KEY \ -e TRANSLOADIT_MCP_TOKEN \ -p 5723:5723 \ --entrypoint transloadit-mcp \ ghcr.io/transloadit/mcp-server:latest \ http --host 0.0.0.0 --port 5723
TRANSLOADIT_MCP_TOKEN explainedTRANSLOADIT_MCP_TOKEN is a self-hosted MCP transport token. It protects your own HTTP MCP endpoint (npx -y @transloadit/mcp-server http), not API2.
Authorization: Bearer ./token.https://api2.transloadit.com/mcp.Generate one, then start HTTP mode:
export TRANSLOADIT_MCP_TOKEN="$(openssl rand -hex 32)"
npx -y @transloadit/mcp-server http --host 0.0.0.0 --port 5723
Most self-hosted users add the server to their MCP client and let the client start it via stdio.
claude mcp add --transport stdio transloadit \
--env TRANSLOADIT_KEY=... \ --env TRANSLOADIT_SECRET=... \ -- npx -y @transloadit/mcp-server stdio
codex mcp add transloadit \
--env TRANSLOADIT_KEY=... \ --env TRANSLOADIT_SECRET=... \ -- npx -y @transloadit/mcp-server stdio
Allowlist tools in ~/.codex/config.toml:
[mcp_servers.transloadit]
command = "npx" args = ["-y", "@transloadit/mcp-server", "stdio"] enabled_tools = ["transloadit_list_templates"]
gemini mcp add --scope user transloadit npx -y @transloadit/mcp-server stdio \
--env TRANSLOADIT_KEY=... \ --env TRANSLOADIT_SECRET=...
Allowlist tools in ~/.gemini/settings.json:
{
"mcpServers": { "transloadit": { "command": "npx", "args": ["-y", "@transloadit/mcp-server", "stdio"], "env": { "TRANSLOADIT_KEY": "...", "TRANSLOADIT_SECRET": "..." }, "includeTools": ["transloadit_list_templates"] } } }
~/.cursor/mcp.json:
{
"mcpServers": { "transloadit": { "command": "npx", "args": ["-y", "@transloadit/mcp-server", "stdio"], "env": { "TRANSLOADIT_KEY": "...", "TRANSLOADIT_SECRET": "..." } } } }
~/.config/opencode/opencode.json:
{
"mcp": { "transloadit": { "command": "npx", "args": ["-y", "@transloadit/mcp-server", "stdio"], "env": { "TRANSLOADIT_KEY": "...", "TRANSLOADIT_SECRET": "..." } } } }
https://api2.transloadit.com/mcp)401 with WWW-Authenticate: Bearer resource_metadata="https://api2.transloadit.com/.well-known/oauth-protected-resource/mcp". MCP clients follow that document to API2's authorization server (authorization code + PKCE, Dynamic Client Registration or Client ID Metadata Documents).GET /mcp, because some clients (Codex) discover the authorization server from that probe. Directory health checks therefore see 401 instead of 200; the JSON body still carries name, status and docs. Self-hosted and unauthenticated deployments keep answering the bare GET with 200.--aud mcp) are forwarded to API2, which verifies them on every call. A rejected or expired token yields a tool result with isError and _meta["mcp/www_authenticate"], so ChatGPT and Claude prompt you to reconnect.securitySchemes (top level and in _meta). Because the hosted endpoint challenges every unauthenticated request, all tools declare oauth2 there; the Robot docs and linting tools ask for no scopes.mcp_credentials_rejected without an OAuth challenge, since only an operator can fix it.Origin header (CLIs, servers) are not restricted. Set allowedOrigins to change the list.TRANSLOADIT_MCP_UPSTREAM_SECRET is set by Transloadit's own deployment so API2 can tell that a relayed aud=mcp token arrives from the hosted service; it is not needed for self-hosting. Hosted mode refuses to start without it, because every authenticated call would fail.TRANSLOADIT_MCP_TOKEN (a static secret you define).TRANSLOADIT_KEY + TRANSLOADIT_SECRET.TRANSLOADIT_KEYTRANSLOADIT_SECRETTRANSLOADIT_SIGNATURE_ALGORITHM (optional, sha1, sha256 or sha384, default sha384; must match the Auth Key)TRANSLOADIT_MCP_TOKENTRANSLOADIT_MCP_RESOURCE_METADATA_URL (hosted mode: protected-resource metadata URL to advertise in 401 challenges)TRANSLOADIT_MCP_UPSTREAM_SECRET (hosted mode only, set by Transloadit's deployment; sent to API2 as Transloadit-Mcp-Upstream next to forwarded bearer tokens)TRANSLOADIT_MCP_RESULT_DOMAINS (optional, comma-separated origins the result widget may load previews from and link to, either exact such as https://tmp-us-east-1.transloadit.net or with a wildcard host; default https://*.transloadit.com,https://*.transloadit.net,https://*.r2.dev)TRANSLOADIT_MCP_WIDGET_DOMAIN (optional, default https://transloadit.com; the origin ChatGPT serves the result widget from, sent as _meta["openai/widgetDomain"])TRANSLOADIT_MCP_CONSOLE_URL (optional, default https://transloadit.com; Console origin for widget deep links)TRANSLOADIT_ENDPOINT (optional, default https://api2.transloadit.com)TRANSLOADIT_MCP_METRICS_PATH (optional, default /metrics)TRANSLOADIT_MCP_METRICS_USER (optional)TRANSLOADIT_MCP_METRICS_PASSWORD (optional)npx -y @transloadit/mcp-server http --host 127.0.0.1 --port 5723npx -y @transloadit/mcp-server http --endpoint https://api2.transloadit.comnpx -y @transloadit/mcp-server http --config path/to/config.jsonThe JSON config accepts the same keys as createTransloaditMcpHttpHandler(), including allowedOrigins, resourceMetadataUrl, signatureAlgorithm, resultDomains, widgetDomain and consoleUrl.
| Tool | Account | OAuth scopes | Notes |
|---|---|---|---|
transloadit_lint_assembly_instructions | no | none | read-only |
transloadit_list_robots | no | none | read-only |
transloadit_get_robot_help | no | none | read-only |
| transloadit_create_assembly | yes | assemblies:write, templates:read | destructive, open-world (URL imports),
Only the beginning is shown; read the rest in the repo