Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Figma MCPMCP100 Recommended | Hugging Face MCPMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP Figma · Publisher source ↗ | First-party MCP Hugging Face · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Sep 23, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | Not documented | 296 GitHub stars · checked 2026-09-24T04:14:16.295000Z |
| Client coverage | ||
| Client coverage details | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | The recommended remote server at https://mcp.figma.com/mcp uses user OAuth. Desktop mode relies on the signed-in Figma desktop application and its local endpoint. | The hosted server supports the current documented Hugging Face OAuth or bearer-token paths. Tool advertisement or discovery configuration is not a server-side authorization boundary for a caller that already knows a tool name; actual authority remains bounded by the authenticated Hugging Face account and token permissions. |
| Cost | Figma documents the MCP feature as free during its current beta and says it is expected to become usage-based paid. Underlying Figma plans and plan-specific features may also apply. | Hub search and the open-source server have no separately documented MCP fee. Hugging Face Jobs, sandboxes, inference, storage, hardware-backed Spaces, and the AI client can incur normal account charges. |
| Permissions | The connected user's Figma identity and existing file permissions govern access. The current remote MCP is not purely read-only: Write to Canvas can create or modify design content for users or seats with required edit authority, while read-only design-context workflows remain available without edit authority. | Base tools search and navigate Hugging Face Hub resources and documentation. Optional tools can create and write repositories, manage sandbox files, run or schedule Jobs, and invoke selected or dynamically discovered community Spaces, bounded by the authenticated Hugging Face token and configured tool set. |
| Data handling | The remote service retrieves design nodes, components, variables, layouts, and potentially Make or Code Connect resources and returns them to the MCP client. Desktop mode can write downloaded assets into the local project. | Queries and results pass through Hugging Face's hosted MCP service. Community Space calls send their arguments to the selected Space and return its outputs to the client. Jobs and sandboxes can process files and compute inputs on Hugging Face infrastructure. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Private designs can be disclosed through tool results, and write-enabled tools can change shared design files. Restrict accessible files, review OAuth consent, require confirmation for writes, and inspect downloaded assets before committing them. | Begin with search-only tools and a least-privilege token. Disable dynamic Spaces, repository writes, Jobs, and sandboxes unless separately approved; review every community Space as third-party code and never send secrets or regulated data. This documentary review does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-07-24 |
| Candidate evidence | 2026-09-24T04:25:05.554391Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →