Hosted by a third party. This MCP server is built and hosted by the
vendor, not Runlayer. This guide covers connecting it through Runlayer for
governance, policies, and audit.
https://mcp.figma.com/mcp using Streamable HTTP transport, authenticating each user with their own Figma account.
Why Figma needs a registered OAuth app
Figma limits which OAuth clients can connect to its remote MCP server: only pre-registered client IDs are accepted, and Figma’s Dynamic Client Registration endpoint is closed. Register a Figma OAuth app in your own workspace, then reach out to your Figma account manager to get its client ID approved for MCP access.Setup
1
Create a Figma OAuth app
- Follow Figma’s OAuth apps guide to create a new app in your Figma workspace
- Set the redirect URI to your Runlayer callback:
This is your Runlayer
APP_URLfollowed by/oauth/callback— the same origin your users open Runlayer at. The value must match exactly (scheme, host, path, no trailing slash). - Copy the Client ID and Client Secret
2
Get the app approved by Figma
- Contact your Figma account manager and ask them to pre-register your OAuth client for MCP access. Share the Client ID (never the secret) and request the
mcp:connectscope - Figma configures the client on their side and will tell you when it is approved; they may ask you to republish the app afterwards
- Until this step is done, Figma’s consent screen rejects the client even though the app exists
3
Add the Figma connector in Runlayer
- In Runlayer, go to My connectors, find Figma, and click Add connector
- Under Registration, keep Pre-registered Client selected
- Paste the Client ID and Client Secret from your Figma app
- Leave OAuth Scopes as
mcp:connect - Save the connector
4
Connect as a user
- Each user opens the Figma connector in Runlayer and clicks Connect
- They complete Figma’s consent screen with their own Figma account
- Tools are then available in any MCP client connected through Runlayer
Troubleshooting
Manual OAuth client setup required
Manual OAuth client setup required
The connector has no client ID or secret configured. Open the connector settings, choose Pre-registered Client under Registration, and paste the credentials from your Figma OAuth app.
403 from api.figma.com/v1/oauth/mcp/register
403 from api.figma.com/v1/oauth/mcp/register
Expected. Figma’s Dynamic Client Registration endpoint rejects every client, regardless of name. Use a pre-registered Figma OAuth app as described above instead of DCR.
Figma consent screen says the app is not approved
Figma consent screen says the app is not approved
Figma has not yet approved your client ID for MCP access. Follow up with your Figma account manager; approval is a manual step on Figma’s side and the app works only after they confirm it.
redirect_uri mismatch
redirect_uri mismatch
The redirect URI on your Figma OAuth app must exactly match
https://<your-runlayer-domain>/oauth/callback. Check for a trailing slash, a different subdomain, or http instead of https.