The Figma integration allows security and compliance teams to automate continuous infrastructure monitoring and evidence collection. It connects WatchDog Security to Figma so your team can perform read-only audits of your cloud environment.WatchDog operates in read-only mode and does not modify configuration settings within your Figma environment.
Prerequisites & Data Access#
Before connecting the integration, ensure the following:You have administrator access to the Figma account
You're an Account Owner or Security Admin in the WatchDog Security portal
Step 1 — Generate a Figma Personal Access Token#
Generate a Figma Personal Access Token#
You can generate an API token directly from the Figma dashboard.1.
Log into the Figma Console
2.
Navigate to: Account Profile → Settings → Security
3.
Under Personal access tokens select Generate new token
4.
Enter a name and choose an expiration date
5.
Under Scopes, select the following: 6.
Click Generate Token and make note of the API Key
You can't recover the API token after you’re done with this step.Once the API key expires you will be required to regenerate an API key to allow WatchDog to continue monitoring your Figma account
Collect Figma Team IDs#
WatchDog Security requires the Team IDs for each Figma to successfully monitor Figma resources and projects1.
Log into the Figma Console
2.
Click on the specific Team from the left sidebar to view its dashboard.
3.
Check your browser's URL address bar. It will follow this format: https://figma.com/files/team/{id}/...
4.
Highlight and copy the long sequence of numbers directly after /team/
You can't recover the API token after you’re done with this step.
Step 2 — Connect the Integration in WatchDog#
1.
Log into the WatchDog Security Portal
2.
Navigate to Management → Integrations
5.
Paste the Team IDs and Personal Access Token
6.
Click Connect Integration
Once the connection is successful, WatchDog will begin synchronizing data from Figma.
Initial Sync#
WatchDog will begin collecting data from Figma
The first synchronization typically completes within 5–10 minutes
Troubleshooting#
Verify the following:
The API token was copied correctly
The token was created with Read all resources
The token has not been revoked or expired