Figma Personal Access Token

A personal access token lets you authenticate requests to the Figma REST API using your own Figma account. This guide walks you through creating one.

Before you start

• You'll need a Figma account you can log into.

• Treat your token like a password - anyone with it can access the API as you.

Generate your token

1. Log into Figma and open the file browser.

2. Click the account menu in the top-left corner and select Settings.

3. Go to the Security tab.

4. In the Personal access tokens section, click Generate new token.

5. In the modal, set an expiration period for the token.

6. Under scopes, select file_content:read and current_user:read. Scopes control which API endpoints the token can access - make sure both of these are ticked.

7. Click Generate token.

Copy and store your token

Figma shows the token string once. Once you generate it, save it somewhere secure (such as a password manager or your secrets store) before closing the modal.

If you lose the token, you'll need to generate a new one - the same value can't be shown again.

Scopes can’t be changed after creation. Figma doesn’t let you edit a token’s scopes later or read the token back, and it won’t warn you if a scope is missing. If you forget file_content:read or current_user:read, just generate a new token with both selected.

If you forget file_content:read or current_user:read, just generate a new token with both selected.

Manage or revoke a token

Back on the Security tab, you can hover over any existing token to see its scopes and when it was last used. You can revoke a token at any time.

Revoke a token instantly if a token is ever exposed.