Where are Figma personal access tokens in the settings?

Go to your Figma profile picture → Settings → Security. The personal access tokens section is on that page. On some Figma versions the heading reads API tokens rather than Personal access tokens — they are the same feature.

Can I see my Figma token again after creating it?

No. Figma shows the token value once, immediately after you click Generate token. If you lose it, revoke the old token and generate a new one with the same name and scopes.

What is the difference between a Figma personal access token and OAuth?

A personal access token authenticates as your Figma account until it expires or is revoked. An OAuth token is issued by a third-party application on behalf of a user and refreshes automatically. For personal scripts and single-user tools, a personal access token is simpler.

My Figma token returns a 403 error. What should I do?

Check that the token has not expired, has the correct scopes for the endpoint you are calling, your Figma account has access to the file, and you are sending the token in the X-Figma-Token header, not the Authorization header.

How to Get a Figma Personal Access Token

Open your Figma account settings, click Security, and select Generate new token. Name the token after the tool that will use it, set an expiration (90 days is a safe default), choose only the scopes you need — File content: Read covers most export and API integrations — then click Generate token and copy it immediately. Figma only shows the token value once.

Figma personal access tokens let external tools authenticate with the Figma REST API. Here is where to create one, which scopes to pick, and how to store it safely.