Skip to main content
Question

Figma Private NPM Registry 403 error when publishing

  • May 13, 2026
  • 1 reply
  • 14 views
EdmundBatesPwc

I have configured my .npmrc file as directed on the admin/resources/npm-registry page.  When I run npm publish, I receive the following error in the terminal:
 

npm notice Publishing to https://registry.figma.com/npm/***/registry/ with tag latest and default access

npm error code E403

npm error 403 403 Forbidden - PUT https://registry.figma.com/npm/***/registry/@make-kits%2fak4acomponents-test

npm error 403 In most cases, you or one of your dependencies are requesting

npm error 403 a package version that is forbidden by your security policy, or

npm error 403 on a server you do not have access to.

The configuration instructions didn’t include any information about setting up a PAT, or configuring a token of any kind, they just gave me text to copy/paste into my .npmrc file.  

Is there additional config I need to do, or some other process I need to perform in order to authenticate with the private registry?

1 reply

Jaycee Lewis
Figmate

Hey hey ​@EdmundBatesPwc  👋 Thanks for sharing all your details. I have a few questions that will hopefully get us pointed in the right direction:

  • What happens if you run echo $FIGMA_TOKEN (or whatever variable is in your file)? Does it return a value? Also, try running npm whoami --registry=https://registry.figma.com/—does it show your username? 

  • Are you a "Contributor" or "Admin" in this specific Figma organization? (A 403 often means you have "Read" access but not "Write" access).

  • Is always-auth=true present in your .npmrc? Is that file located in your project folder or your user home directory?

Thanks for the additional details! — Jaycee

Terms & ConditionsAccessibility statement