Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | ExcalidrawShortlist candidate | Figma MCPMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP github:excalidraw · Publisher source ↗ | First-party MCP Figma · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Not documented Package: Not documented |
| Popularity evidence | ||
| GitHub stars | 5,556 GitHub stars · checked 2026-10-21 | Not documented |
| Client coverage | ||
| Client coverage details | Not documented | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Public/remote authentication requirements depend on the current Excalidraw service/client path; do not invent account scopes where the publisher does not require them. | The recommended remote server at https://mcp.figma.com/mcp uses user OAuth. Desktop mode relies on the signed-in Figma desktop application and its local endpoint. |
| Cost | Current service/client plan or hosting/model costs may apply; use publisher pricing only. | Figma documents the MCP feature as free during its current beta and says it is expected to become usage-based paid. Underlying Figma plans and plan-specific features may also apply. |
| Permissions | Primarily diagram/content creation and interactive rendering in the connected client; exact persistence/sharing behavior depends on deployment/client. | The connected user's Figma identity and existing file permissions govern access. The current remote MCP is not purely read-only: Write to Canvas can create or modify design content for users or seats with required edit authority, while read-only design-context workflows remain available without edit authority. |
| Data handling | Diagram content and prompts can transit the remote service and AI client/provider when the hosted endpoint is used. | The remote service retrieves design nodes, components, variables, layouts, and potentially Make or Code Connect resources and returns them to the MCP client. Desktop mode can write downloaded assets into the local project. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Main risk is immature MCP Apps/client interoperability and diagram content exposure, not broad infrastructure mutation. | Private designs can be disclosed through tool results, and write-enabled tools can change shared design files. Restrict accessible files, review OAuth consent, require confirmation for writes, and inspect downloaded assets before committing them. |
| Evidence date | ||
| Editorial review | 2026-10-21 | 2026-07-24 |
| Candidate evidence | 2026-10-21T00:00:00Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →