Agent skill · software engineering · jeremylongshore
figma-enterprise-rbac
Configure Figma Enterprise features: OAuth 2.0, team management, and
Why this skill is useful
Adds executable scripts for OAuth 2.0 integration and team management in Figma that are not commonly found in public documentation.
What it needs
Requires express, typescript installed locally. Requires figma account access. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Figma Enterprise RBAC Overview Figma Enterprise features accessible via the REST API: OAuth 2.0 for user-facing apps, team/project management, and the Variables API (Enterprise-only). This skill covers building OAuth integrations and managing organizational access. Prerequisites Figma Enterprise or Organization plan OAuth app registered in Figma developer dashboard Understanding of OAuth 2.0 authorization code flow Instructions Step 1: OAuth 2.0 App Setup Step 2: OAuth Callback Handler Step 3: Team and Project Management Step 4: Variables API (Enterprise Only) Step 5: Access Control Middleware Output OAuth 2.0 flow with authorization, token exchange, and refresh Team/project/file listing via API Variables API access (Enterprise) Access control middleware for file-level permissions Error Handling Error Cause Solution ------- ------- ---------- OAuth code expired Exchange took >30s Exchange immediately on callback Token refresh failed Refresh token revoked Re-authenticate user through OAuth flow 403 on Variables API Not Enterprise plan Use styles API instead (available on all plans) Team components empty No published components Publish components in Figma first Examples Complete the OAuth flow locally and inspect the granted user (Steps 1-2): List a project's files as that user — RBAC means you only see what the user can (Step 3): A 403 here is working access control, not a bug — route it through the Step 5 middleware. Variables API (Enterprise-only) usage: references/variables-api-enterprise-only.md. Resources Figma OAuth 2.0 Figma Variables API Component Endpoints Next Steps For major migrations, see figma-migration-deep-dive.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/figma-enterprise-rbac