Skip to main content
Figma is a design tool. Connected to WPOS, it lets the agent pull components and file data to inform how a site is built, all from the chat beside your site’s live preview. Category: Design and forms Actions available: 23+
Figma is a first-party WPOS connector, not part of the Composio catalog. It authenticates with a personal access token you generate in Figma, rather than the managed sign-in popup most connectors use.

​
What you can do

  • Get components
  • Read file data
  • Work with webhooks

​
Example requests

Once Figma is connected, ask in the Command Center:

​
Before you connect

  • A Figma account. Free works for personal files. Team files require the appropriate seat.
  • View access to any file you want WPOS to read.
  • The file key for each design, the segment after /file/ in the file URL.

​
Connect it

1

Open WPOS

In WordPress admin, open WPOS. You land on the chat screen.
The WPOS chat screen in WordPress admin.

WPOS opens on the chat screen.

2

Open a new tab and choose Connectors

Click the + button to open the launcher panel, then choose Connectors.
The WPOS launcher panel listing Preview, Site tree, Files, Skills, Connectors, and Settings.

The launcher panel. Connectors is the fifth entry.

3

Find the connector

Every available connector is listed alphabetically, each with a button showing what it needs.
The WPOS Connectors panel listing Calendly, Canva, Figma, Google Analytics, Google Calendar, and Google Docs.

The Connectors panel, sorted alphabetically.

4

Search and press Connect

Type Figma into Search for integrations, then press Connect.
The Figma row with a Connect button.

Search narrows the list to one row.

5

The Figma panel asks for a token

Instead of a popup, WPOS opens the Figma panel with an empty field labelled Figma personal access token. Leave it open and generate the token next.
The WPOS Figma panel with an empty personal access token field.

Figma asks for a token, not an OAuth sign-in.

6

Open Figma security settings

In Figma, open Settings, then Security, and scroll to Personal access tokens. Click Generate new token. This is also where you delete the token later, which is what revokes WPOS access.
Figma's security settings showing the personal access tokens section with a Generate new token link.

Personal access tokens live under Settings, then Security.

7

Name the token and set its scopes

Give it a recognizable name such as wpos, choose an expiry, and tick at minimum current_user:read, file_content:read, and file_metadata:read. Add the comment scopes if WPOS should read or post comments.
Note the expiry date Figma shows. When it passes, the connection flips to Expired and you generate a fresh token. Nothing warns you in advance, so put a reminder in your calendar.
Figma's generate new token dialog with a name, expiration, and scope checkboxes.

Name, expiry, and scopes.

8

Copy the token immediately

Figma shows the token once, with “Copy this token. This is your only chance to do so.” Copy it now, because it cannot be viewed again, only replaced.
Treat this string like a password. It grants access to your Figma files as if it were you. Do not paste it into chat, email, a ticket, or a screenshot. The token in this guide is blacked out for exactly that reason.
The generated Figma token, redacted.

Shown once. The value here is redacted deliberately.

9

Paste it into WPOS

Back in the Figma panel, paste the token into the field, where it masks as you paste, and click Connect.
The WPOS Figma panel with a masked token in the field.

The field masks the token as you paste.

10

Confirm in WPOS

The row reads Connected, with View Details rather than a Disconnect button. WPOS verifies the token against Figma before saving, so Connected means it genuinely works.
The Figma row showing Connected with a View Details button.

Connected. The row offers View Details, not Disconnect.

11

Where Disconnect lives

Click View Details to open the panel again. It now shows a green Connected badge and the Disconnect button.
Figma, Jotform, and Stitch are the connectors whose disconnect lives inside the detail panel rather than on the row.
The Figma detail panel showing a Connected badge and a Disconnect button.

Disconnect lives inside the detail panel.

​
Disconnect

Press View Details on the row, then Disconnect inside the panel. The row itself has no Disconnect button. To invalidate the token fully, also delete it in Figma, under Settings, then Security, then Personal access tokens. Figma’s Connected apps section lists OAuth grants, and a personal access token does not create one, so deleting the token is the whole revocation. Disconnecting in WPOS does not revoke anything on Figma’s side. Anyone holding a copy of the token could still use it until you delete it there.

​
Troubleshooting

Most often the token reached the expiry date set when it was generated, and nothing warns you beforehand. It can also mean the token was revoked. Generate a new token and reconnect.
The token belongs to an account without access to that file, or the file key is wrong. Confirm the connected account can open it, and re-copy the key from the URL.
Treat it as compromised. Delete it in Settings, then Security, then Personal access tokens, generate a replacement, and reconnect. Deleting it in Figma is the only thing that actually revokes it.
Files with hundreds of frames return a lot of data. Ask for a specific frame or page rather than the whole file.
For popup failures, expired connections, and other issues shared across every connector, see Introducing Connectors.