LoginSign Up
← Back to all sparks
P

Penpot

DESIGN
Velocity6.3

Penpot adds an MCP server — open-source design now reaches into AI workflows.

open-source-designmcpself-hosteddesign-tokensinfrastructureinteroperability
◆Current state
Penpot, the open-source design and prototyping platform, shipped 2.15 (Master of Puppets) with native MCP server integration alongside a chunked upload API that removes prior media size limits and a steady stream of performance work. Predecessor releases (2.11 through 2.14) handled the unglamorous foundation — reworked config variable naming, OIDC SSO migration, design tokens accessible to plugins, on-demand i18n loading, and bulk token operations. Several entries in this window are static site pages (self-host landing, integrations docs, libraries gallery) being captured as updates by the crawler.
◆Where it's heading
Penpot is layering AI access on top of a maturing self-host story. The MCP integration is the directional move — it lets agents read and write to Penpot files via the same plugin/API surface that already powers the editor's extension model, and Penpot is the only major open-source design tool with that combination. Underneath, the 2.11→2.14 work has been quiet infrastructure hardening: configuration is being normalized, SSO modernized, design tokens extended into plugin land, build scaling improved.
◆Prediction
Expect 2.16 to push MCP from a server endpoint into a more opinionated agent interface — likely structured tool definitions for common design tasks (component edits, variant swaps, token updates) rather than raw API access. The chunked upload API also unlocks a binary asset pipeline that Penpot can now formalize: expect first-class large-asset workflows in the next minor or two.

◆Recent moves

  1. 2mo ago

    2.15 - Master of Puppets

    ⚡ SPARK

    2.15 Master of Puppets adds MCP server integration, a chunked upload API that eliminates the prior upload size cap, webp export from the plugin types, automatic backoff retry for idempotent RPC requests, and a long list of UX polish and bug fixes. The MCP addition is the directional one — Penpot is now agent-callable via a standard protocol.

  2. 2mo ago

    Self-host landing page (marketing)

    A scrape of Penpot's self-host landing page, not a release. Reinforces the deployment-agnostic positioning that the actual MCP and infrastructure releases sit underneath.

    View source ↗
  3. 2mo ago

    Tuesday, March 10, 20262.14 - Come together💥 Breaking changes & DeprecationsDeprecate PENPOT_HTTP_SERVER_MAX_MULTIPART_BODY_SIZE in favo…

    Capture of 2.14 Come together: design tokens become accessible from plugins (closing a gap for plugin authors), token reference remapping on rename, nested path views, and a deprecation of the verbose multipart-body env var in favor of a single body-size variable. A solid plugin-and-tokens release.

    View source ↗
  4. 2mo ago

    Release notes index page (2.14 capture)

    A second capture of the 2.14 Come together release notes — same content as the prior entry, picked up via the release notes index page rather than the dated entry. Worth tracking since the page is updated when newer releases publish.

    View source ↗
  5. 2mo ago

    Integrations & API page (docs)

    Capture of Penpot's Integrations & API page. The MCP server is listed prominently — the same one that ships in 2.15 — but the page itself is documentation, not a release event.

    View source ↗
  6. 2mo ago

    Monday, January 19, 20262.13 - All The Small Things❤️ Community contributions by (Thank you!)Fix mask issues with component swap (by @dfe…

    2.13 All The Small Things adds box shadow tokens, on-demand i18n translation loading (faster initial loads), and surfaces deleted files in the dashboard for recovery. A predictable late-cycle polish release before 2.14 and 2.15 push deeper changes.

    View source ↗