Thread

Figma restricts MCP access to whitelisted clients, excluding Pi

187 points · 106 comments · thdr

ig0r0 · 1790872463 · focus · HN ↗
I like how Pi released an updated with a new oauth client name field for mcp where I just wrote Codex and Figma mcp works now.
1. Tade0 · 1790882924 · focus · HN ↗
  I was wondering what kind of client name they were talking about.
  It's really silly that this was the only means of blocking access. I expected them to have, I don't know, some sort of cryptographic signature or something.
  An additional JWT with a long expiry time would even work here, anything.
  1. TeMPOraL · 1790884681 · focus · HN ↗
    Ironically, it's exactly the kind of "security" I imagine current Claude models would work around as a matter of course, with barely a note left for the user to know the agent hit a speed bump when operating the MCP.

Unofficial Hacker News client; not affiliated with Y Combinator.