October 3, 2026 · 5 min read
Figma's MCP allowlist: why an open protocol has a guest list, explained
Figma's remote MCP server only accepts clients on its list, and Pi got an HTTP 403 at sign-in the day after it put MCP in its core. What happened, how OAuth client registration becomes the gate, the local desktop fallback, and what a frontend developer should check before building a design-to-code workflow on it.



