Guide
Specsure is a set of open tools for design tokens and the code that uses them. They read the same tokens, whatever wrote them, and run where you work: in the browser, in Figma, in CI and next to your coding agent.
Which tool for what
| Tool | Use it to |
|---|---|
| Token Diff | See what a token release changes and breaks, and which version it needs |
| Token Fix | Find the token for a color or a size, and put the values written by hand in your code on tokens |
| Figma plugin | Get a Figma file’s variables and styles out as DTCG tokens |
| MCP server | Have a coding agent use your tokens instead of hard-coded values |
| GitHub Action | Check every pull request that changes tokens or code |
How they fit together
- Export from Figma. The plugin writes the file’s variables and styles as DTCG 2025.10: a .zip with a file per collection and mode and a resolver, or one file.
- Fix the code in Token Fix. Open the export or your token package, find the token for each value, and add your app to see what in it is written by hand and what to write instead.
- Compare before a release in Token Diff. The previous version against the new one, a package, a repository or two exports: what breaks, in which theme, and the semver bump.
- Keep it checked. The GitHub Action posts the same report on every pull request, and the MCP server gives coding agents the tokens, so new code starts on them.
Each step works on its own: Token Diff and Token Fix read token packages and repositories that never went through Figma.
What they read
- DTCG 2025.10: token files, resolver documents with sets and modifiers, modes in
$extensions.mode. - Older token JSON with
valueandtype, token sets and theme files. - CSS custom properties, with themes in
:root,[data-theme],.darkorprefers-color-scheme. - From anywhere: dropped files, a folder or a .zip, an npm package, a GitHub repository.
Privacy
Everything runs on your side: in your browser tab, in Figma, on your CI runner or your computer. There is no account. Your files are never uploaded; packages and repositories are fetched by your browser straight from jsDelivr and GitHub.
Open source
The tools and the engine behind them, dsgraph, are open source under MIT: github.com/specsure/specsure. The same engine runs as a CLI in your terminal.