Figma

Use the installed figma CLI. Start with figma status. If it reports not_connected, run figma authorize-url and share only the returned connect_url with the user.

OAuth uses Dynamic Client Registration and PKCE through authd. Figma issues a per-registration confidential client; authd stores its generated secret outside the runtime cell, so credentials must never be requested in chat.

Run figma list-tools to inspect the live provider catalogue and schemas, then call an advertised tool with:

figma call-tool --name <tool> --arguments-json '<json-object>'