Back to Home
penpot icon

penpot-mcp

by penpot

Overview

The Penpot MCP server enables LLMs to perform data queries, transformation, and creation operations on Penpot design files by allowing LLMs to execute JavaScript code via a Penpot plugin.

Installation

Run Command
npm run bootstrap

Environment Variables

  • PENPOT_MCP_SERVER_LISTEN_ADDRESS
  • PENPOT_MCP_SERVER_PORT
  • PENPOT_MCP_WEBSOCKET_PORT
  • PENPOT_MCP_REPL_PORT
  • PENPOT_MCP_SERVER_ADDRESS
  • PENPOT_MCP_REMOTE_MODE
  • PENPOT_MCP_LOG_LEVEL
  • PENPOT_MCP_LOG_DIR
  • PENPOT_MCP_PLUGIN_SERVER_LISTEN_ADDRESS
  • MULTI_USER_MODE

Security Notes

CRITICAL: The `execute_code` tool allows arbitrary JavaScript code execution directly within the Penpot plugin's context (`new Function(...)` is used). If an attacker gains control of the MCP server or the LLM client, they could execute malicious code within the user's Penpot session, potentially manipulating design files or exfiltrating data. File system access for `import_image` and `export_shape` tools is enabled by default in single-user (local) mode, allowing local file read/write, which is risky. Multi-user mode currently uses a hardcoded 'dummyToken' for authentication, making it insecure for shared deployments.

Similar Servers

Stats

Interest Score78
Security Score2
Cost ClassHigh
Avg Tokens100000
Stars142
Forks18
Last Update2026-01-19

Tags

PenpotMCPLLMDesign AutomationPluginTypeScript