If you have a Figma file that has to remain private or password protected at all times, Optimal workshop requires access to Figma so that we can gather the names and contents of your Figma frames. This is so we can provide you with visuals like our heatmaps and allow you to view titled thumbnails of your prototype during setup and analysis.
The data we can retrieve is dependent on Figmas REST API, which doesn’t support separated scope access. This is why you will see the full list of permissions when granting Optimal Workshop access.
Optimal will only retrieve data about the specific file you are importing; we won’t retrieve data about your team, other projects, users, etc. The endpoints that Optimal will request from Figmas REST API during import are:
GET file and
You can remove Optimal Workshop from Figma at any-time by viewing the ‘connected apps’ section in your Figma account settings. Be aware that if you revoke access, and then need to re-sync your prototype link, you will have to re allow Optimal Workshop access to the file.