Figma

Reviewed

figma.comSourcedUpdated 28 Oct 2026 · today

You can register a Figma OAuth app in minutes, and publish it right away as a private app for your own team or organization. Before people outside that team or org can connect, Figma has to review the app as a public app. The submission page says 5 to 10 business days, but developers report waits of two to four weeks or more.

Your work: 2–6 h
Waiting on Figma: 1–5 weeks
First user connects: Today, in about 15 to 30 minutes. Draft apps work for you and your plan's admins.

3 not confirmed 10 sources Why this tier How did it go?

.md JSON

Use with your agent

Set up a Figma OAuth app for our integration, as far as you can.
Guide: https://oauth-guide.akshatsethi.com/apps/figma.md (updated 28 Oct 2026)

Reviewed. Hands-on work: 2–6 h. Waiting on Figma: 1–5 weeks.

Check these exist first:
- Figma account with a team or organization [human]
- An HTTPS callback URL [agent]

Needed later, not now:
- Logo, description and listing details (for launch)
- User support channel (for launch)
- Test access for Figma's reviewer (for launch)
- Privacy policy and legal review (for launch)

Steps, in order:
1. [human] Create the OAuth app in My Apps
2. [agent] Add your redirect URI. On the OAuth credentials page, add your OAuth client's callback URL. Figma only exchanges and refreshes tokens for registered URLs. Watch out: The redirect_uri parameter must match a registered URL exactly, or the token exchange fails.
3. [agent] Select granular scopes. On OAuth scopes, select only the scopes for the endpoints you call, such as current_user:read, file_content:read and file_comments:read. Request the same scopes, or a subset, in the authorization URL. Watch out: files:read and file_read are deprecated and being removed, so use granular scopes. Some scopes only work for private apps or on Enterprise plans.
4. [agent] Configure your OAuth client and test. Use authorization URL https://www.figma.com/oauth and token URL https://api.figma.com/v1/oauth/token with HTTP Basic client auth. The refresh URL is https://api.figma.com/v1/oauth/refresh. PKCE with S256 is supported. Watch out: Authorization codes expire after 30 seconds, so exchange them right away. Embedded WebViews aren't supported. Refreshing a token invalidates the previous access token.
5. [human] Publish as a private app
6. [human] Prepare the public listing and test notes
7. [human] Submit for review
8. [provider] Wait for Figma's review (wait 1–5 weeks)

Rules:
- Do [agent] steps yourself. Steps in Figma's dashboard need a browser I'm signed in to; without one, give me the exact clicks and values instead, then carry on with the code.
- At each [human] or [provider] step, stop and tell me exactly what's needed.
- Never put client secrets in chat, code or commits. I paste them into our OAuth client or secret manager myself.
- Claims marked Inferred or low confidence in the guide are unverified. Check them and tell me what you find.
- If the guide doesn't match what you see (a page, field or requirement), tell me and report it so it gets fixed: POST https://oauth-guide.akshatsethi.com/api/reports with {"app": "figma", "step": 2, "message": "what you saw"} (step is optional), or call the report_problem MCP tool. Never put secrets or personal data in a report.
- When setup ends (users can connect, or it's waiting on Figma's review) or you can't get past a step, report how it went so the guide improves: POST https://oauth-guide.akshatsethi.com/api/reports with {"app": "figma", "outcome": "worked" | "waiting" | "stuck", "step": 3, "message": "what happened"}, or call the report_setup MCP tool. Stopping for me at a [human] step isn't stuck: don't report that.
- Finish with what's done, the redirect URI and scopes used, and what's left before public launch.

Paste into Claude Code, Cursor or any agent.

Figma

Plan

SetupBefore you start

BuildDraft app

BetaPrivate app

LaunchPublic app

Why reviewed

Scopes

When you get stuck

Not confirmed

Sources

Feedback

Figma

Plan

SetupBefore you start

BuildDraft app

BetaPrivate app

LaunchPublic app

Why reviewed

Scopes

When you get stuck

Not confirmed

Sources

Feedback