Skip to main content

Problem Description

I am trying to use the Figma API with a personal access token, but every request returns:

 

json

КопиранеРедактиране

{"status":403,"err":"Invalid token"}

I have tried the following:

  • Generated multiple new tokens.
  • Made sure to copy the entire token before leaving the page.
  • Revoked all old tokens before generating a new one.
  • Tested the token with the me endpoint: 
     

    sh

    КопиранеРедактиране

    curl -X GET "https://api.figma.com/v1/me" -H "Authorization: Bearer MY_NEW_FIGMA_TOKEN"

    → Still getting "Invalid Token".
  • Tried with a new Figma account.
  • Tried different internet connections (Wi-Fi, Mobile Data, VPN Off).
  • Made sure the Figma file is public ("Anyone Can View").

Example Requests I Tried

1️⃣ Checking if my token is valid:

 

sh

КопиранеРедактиране

curl -X GET "https://api.figma.com/v1/me" -H "Authorization: Bearer MY_NEW_FIGMA_TOKEN"

Expected: JSON with account details
Got: "Invalid Token"

2️⃣ Checking if my token can access my file:

 

sh

КопиранеРедактиране

curl -X GET "https://api.figma.com/v1/files/MY_FILE_ID" -H "Authorization: Bearer MY_NEW_FIGMA_TOKEN"

Expected: JSON with file details
Got: "Invalid Token"

Hey ​@Ivaylo Kolev, thanks for reaching out! 

From what you’ve described, it looks like you’re using the wrong token. Be sure to use the token in the X-Figma-Token header. 

The Authorization: Bearer testtokenxample is for OAuth. 
 

Hi, doing the same and when providing X-Figma-Token, getting:

 
header = {'X-Figma-Token': FIGMA_PERSONAL_ACCESS_TOKEN}

 

'{"error":true,"status":401,"message":"OAuth token is not passed in the Bearer authorization header."}'

 

 

Hi ​@Tech_AtBuck ,

 

It might be an OAuth step issue, so but the best is getting help from our technical support team. So, could you submit a bug report detailing the steps that led to this issue? You can do so by following the link: https://help.figma.com/hc/en-us/articles/360041468234-Submit-a-bug-report

 

Thanks for your patience!
Toku

Terms & ConditionsCookie settingsAccessibility statement