Pi work resources

A Pi extension for allowlisted, read-only access to:

• Figma Desktop's local MCP server.
• Atlassian Cloud's official Rovo MCP server.

Install

pi install npm:@eric.wien/pi-work-resources

First-time setup

Figma Desktop

1. Update and open Figma Desktop.
2. Open a Figma Design file and enter Dev Mode.
3. Enable the desktop MCP server in Figma's inspect panel.
4. In Pi, run /work-connect figma.

Atlassian Cloud

Atlassian authorization currently requires macOS because credentials are stored in the user's login Keychain.

Run:

/work-connect atlassian

Pi opens Atlassian's OAuth page. Sign in to the sites you choose to make available and approve the requested read/search scopes. Site identifiers are discovered from Atlassian after authorization; none are configured in this repository.

OAuth client registration data and tokens are stored in Keychain, not in Pi settings, sessions, or this checkout. No write, admin, or delete scope is requested.

Commands

• /work-connect [all|figma|atlassian]
• /work-status
• /work-logout [atlassian]

The work_resources_connect model tool can reconnect an existing authorization but cannot initiate browser authorization.

Read-only boundary

The extension registers only reviewed allowlisted tools or tools explicitly marked read-only by the official MCP server. Mutating name prefixes are rejected even when a server annotation is wrong. Remote results are labeled as untrusted content, and all work-resource tools are disabled for untrusted projects.

Extensions run with your account's permissions. Review the source and the server scopes before authorizing access.

The MCP client is pinned exactly. Dependabot checks monthly for updates; security or compatibility updates are released as a new package version rather than changing existing installs silently.