Manage internet access for the Figma agent and Figma Make

The Figma agent and Figma Make run inside a sandbox. A sandbox is a secure container that runs on Figma’s infrastructure. You can choose which websites these sandboxes can reach, so the agent has the access your team needs while your data stays protected.

How internet access works

The sandbox runs:

• The Figma agent in Figma Design
• The Figma Make coding agent
• The systems that build your Figma Make code into a working preview

These sandboxes have rules about which websites they can reach. Sandboxes can always reach essential services. You can adjust access beyond that.

Essential services

Essential services are the sites the Figma agent and Figma Make need to work. They include:

• Figma services and key sub-processors, like Datadog
• Common tools for building software, like npm, Loom, and Unsplash

Read and write access

The agent can interact with a website in two ways:

• Read: Search the web, or load and view content from a site
• Write: Send data to a site, like submitting a form or posting to an API

Choose your organization's internet access

You can use the Read and web search toggle to choose how much of the web the agent and sandboxes can reach.

When Read and web search is on (which is the default behavior), agents and sandboxes can:

• Search the web and read from any website
• Write only to essential services and to sites you add under Write

When Read and web search is off, agents and sandboxes can:

• Read and write only to essential services and to sites you add under Read and write

Update internet access settings

1. From the file browser, click Admin.
2. Select the Settings tab.
3. In the AI section, find Internet access.
4. Turn Read and web search on or off.
5. Add any other websites that agents and sandboxes need to reach:
   • If Read and web search is on, add sites under Write.
   • If Read and web search is off, add sites under Read and write.
6. Click Save.

Enter each site as a public domain name, like example.com or docs.example.com. Don't include https://, ports, paths, or wildcards (*.example.com). IP addresses and localhost aren't supported.

Related resources

• Search the web with the Figma agent and Figma Make
• Manage AI settings and content training for your team or organization
• Manage MCP connectors for the Figma agent and Figma Make
• Manage backend integration for an organization