MCP server intelligence profile

Zeplin MCP Server

Connects AI agents to Zeplin to access component and screen specs, documentation, and design tokens for generating UI code that matches designs

Local OnlyOfficial distributionzeplin
Verified cleanNpm · 1.0.6

Our scanner tested version 1.0.6 without proving a finding in the methods exercised. This is not a guarantee that every deployment is secure.

1Distribution channel
4Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install @zeplin/mcp-server from npm

Version 1.0.6 declares 1 executable entrypoint.

npm install --save-exact @zeplin/mcp-server@1.0.6
npx -y -p @zeplin/mcp-server@1.0.6 @zeplin/mcp-server
MCP client configuration example
{
  "mcpServers": {
    "@zeplin/mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "@zeplin/mcp-server@1.0.6",
        "@zeplin/mcp-server"
      ]
    }
  }
}

Identity

Canonical slugzeplin-mcp-server-28169433DeploymentLocal Only
Canonical packagenpm:@zeplin/mcp-serverRepositoryzeplin/mcp-server
First publishedLatest release
Last security verificationAug 17, 2026Classification confidence90%
PublicationPublishedOfficial distributionYes

Distributions

ChannelIdentifierCurrent versionVersionsSource
npm@zeplin/mcp-server1.0.61Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
npm@zeplin/mcp-server1.0.6CurrentSep 5, 20264 toolsSucceeded · 0 resources · 0 promptsVerified clean
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

Provenanceartifact_hash_verifiedSignature
MCP SDK@modelcontextprotocol/sdk Artifact SHA-256117ef6f15e3d4d17516d0cd9235da7abc29ddbaac8f882d76c90f3fe555262f0
Scannermcp-proof-engine 0.1.0Scan completedAug 17, 2026
Security rating36 / 100Methodologyversion-rating-1.0
Executable entrypoints
[
  "@zeplin/mcp-server"
]
Rating reasons
[
  "security_policy_not_observed"
]
0Proven
301Clean
0Inconclusive
0Flaky
0Errors

Current protocol inventory

2025-06-18Negotiated protocol
Zeplin MCP ServerServer-reported name
1Capability groups
Aug 17, 2026Observed

Tools 4

ToolCategoryAnnotationsRisk
download_layer_assetDownloads a specific visual asset (e.g., SVG icon, PNG image) for a given layer from Zeplin and saves it to a local path. Use this tool when an asset referenced in the design (obtained from `get_screen` or `get_component`) is missing from the codebase and needs to be fetched directly from Zeplin.
Input schema
{
  "type": "object",
  "properties": {
    "layerSourceId": {
      "type": "string",
      "description": "The unique source ID of the layer for which the asset should be downloaded. This ID is obtained from the `layers` array in the response of `get_screen` or `get_component` calls, from a `sourceId` or similar field associated with a specific layer that has exportable assets"
    },
    "localPath": {
      "type": "string",
      "description": "The absolute path to the directory where images/assets are stored in the project. If the directory does not exist, it will be created. The format of this path should respect the directory format of the operating system you are running on. Don't use any special character escaping in the path name either."
    },
    "assetType": {
      "type": "string",
      "enum": [
        "svg",
        "png",
        "pdf",
        "jpg"
      ],
      "description": "The desired format of the asset to download. Must be one of 'svg', 'png', 'jpg', or 'pdf'. Choose the format most suitable for the project's needs or as indicated by design specifications. If unsure, 'svg' is often preferred for vector graphics and 'png' for bitmaps."
    }
  },
  "required": [
    "layerSourceId",
    "localPath",
    "assetType"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_componentFetches detailed design specifications for a specific Zeplin component, including its properties, variants, layers, and associated design tokens. Use this when you need to understand the structure and styling of a single, reusable UI element from Zeplin.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "format": "uri"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_design_tokensDownload design tokens for a project or styleguide
Input schema
{
  "type": "object",
  "properties": {
    "resourceId": {
      "type": "string",
      "description": "The ID of the project or styleguide for which the design tokens should be downloaded."
    }
  },
  "required": [
    "resourceId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_screenFetches detailed design data for a specific screen from Zeplin. This includes screen variants, layer information (structure, position, styling), annotations, and project-level design tokens. Use this to understand screen layout, content, and interactions for development or review.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "format": "uri"
    },
    "includeVariants": {
      "type": "boolean",
      "default": true,
      "description": "Set to `true` (default) to retrieve all variants of the screen (e.g., different states or sizes). Set to `false` if only the specific screen version linked in the URL is needed, or to conserve tokens if variants are not relevant to the user's query. Fetching all variants provides a complete picture but uses more tokens."
    },
    "targetLayerName": {
      "type": "string",
      "description": "Optional. If the user's query refers to a specific named layer or element on the screen (e.g., 'the submit button', 'user profile image'), provide that layer's exact name here. This will focus the returned data on that specific layer and its children, making the response more concise and relevant. If omitted or the layer name is not found, data for all layers on the screen will be returned."
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

Zeplin MCP Server questions

How do I install Zeplin MCP Server?

Install the selected package version with: npm install --save-exact @zeplin/mcp-server@1.0.6

What tools does Zeplin MCP Server provide?

Zeplin MCP Server exposed 4 tools during independent protocol observation, including download_layer_asset, get_component, get_design_tokens, get_screen.

Is Zeplin MCP Server secure?

Our scanner tested version 1.0.6 without proving a finding in the methods exercised. This is not a guarantee that every deployment is secure.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP ServersMCP Servers With Completed Verification

Let’s talk about MCP security.

Share your details and our security team will contact you.