Skip to content

feat(security): allowlist the Figma MCP OAuth authorization endpoint #7621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
psantus wants to merge 1 commit into from
Closed

feat(security): allowlist the Figma MCP OAuth authorization endpoint #7621

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion src/kiro_crew/security/exfil.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -285,7 +285,7 @@ def _oauth_url_payload_diagnostic(
("gitlab.com", "/oauth/authorize"),
("mcp.auth.mail.superhuman.com", "/oauth2/authorize"),
("mcp.linear.app", "/authorize"),
# Maintainer-verified 2026-09-01 via RFC 8414 metadata at
# Maintainer-verified via RFC 8414 metadata at
# https://mcp.miro.com/.well-known/oauth-authorization-server
# (authorization_endpoint: https://mcp.miro.com/authorize), matching the
# reporter's independent RFC 8414 read in issue #7578. Not (yet) a
Expand All @@ -294,6 +294,14 @@ def _oauth_url_payload_diagnostic(
("mcp.miro.com", "/authorize"),
("mcp.notion.com", "/authorize"),
("vercel.com", "/oauth/authorize"),
# Figma's MCP authorization server (issuer https://api.figma.com) hosts
# its consent page on www.figma.com. Independently corroborated by the
# maintainer's operator via RFC 9728 protected-resource discovery on
# https://mcp.figma.com/mcp (authorization_servers -> api.figma.com)
# and its RFC 8414 metadata, which advertises
# authorization_endpoint https://www.figma.com/oauth/mcp — the consent
# host is the main web property by the provider's own design.
("www.figma.com", "/oauth/mcp"),
}
)

Expand Down
14 changes: 14 additions & 0 deletions test/oauth_url_corpus.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -182,6 +182,20 @@
"&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"
"&code_challenge_method=S256",
),
# Figma MCP consent page (issuer api.figma.com, consent on www.figma.com;
# RFC 8414 metadata via RFC 9728 discovery on mcp.figma.com/mcp).
# developers.figma.com/docs/figma-mcp-server/
(
"figma-mcp",
"https://www.figma.com/oauth/mcp"
"?client_id=fig_abcDEF1234567890"
"&redirect_uri=http%3A%2F%2F127.0.0.1%3A55089%2Fcallback"
"&response_type=code"
"&scope=mcp%3Aconnect"
"&state=af0ifjsldkjZx9yW8vU"
"&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"
"&code_challenge_method=S256",
),
]

# Consent URLs that the ACP banner-safety gate
Expand Down
Loading