By NHI Mgmt Group Editorial TeamBased on Braintrust: “Paper MCP vs Figma MCP for frontend agents” (July 20, 2026)

TL;DR: Similar average visual quality on simple pages emerged in an evaluation of Figma MCP versus Paper MCP by Braintrust, but Paper was more consistent and cheaper on complex designs, while Figma produced more semantic HTML and had occasional collapse modes, especially on designs with atypical layouts. The result is less about which server “wins” and more about how agent toolchains, output constraints, and maintainability trade-offs should be governed.


At a glance

What this is: This evaluation compares two design MCP servers for frontend agents and finds similar average visual quality, but different trade-offs in consistency, cost, and HTML structure.

Why it matters: IAM and AI platform teams should care because the toolchain an agent uses changes reliability, maintainability, and the control points available for governing agent-produced output.

By the numbers:

  • On complex designs across 27 pages, Paper averaged 0.716 visual similarity while Figma averaged 0.679.
  • Figma's run-to-run variance was about 1.9 times Paper's, and it ran 42% longer while costing 32% more per point of visual quality.

Context

An MCP server choice is not just a tooling preference. It shapes how an agent translates intent into output, how much state has to be inferred from a proprietary or native canvas, and how much drift appears when the same task is repeated across runs.

For frontend agents, the governance question is whether the tool produces a faithful render, a maintainable artifact, and a stable workflow under variation. The identity angle is indirect but real: when agents use design tools as part of a software delivery chain, teams still have to govern tool access, output provenance, and the trust boundary between agent intent and final code.


Key questions

Q: How should teams evaluate MCP servers for frontend agents?

A: Evaluate MCP servers on more than output similarity. Teams should compare variance across repeated runs, semantic quality of generated code, failure modes on edge-case layouts, and total runtime cost. A tool that looks slightly weaker on average but behaves predictably is often easier to govern and cheaper to operate than one with higher collapse risk.

Q: Why do similar-looking agent outputs still create governance risk?

A: Because visual parity does not guarantee structural parity. An agent can recreate the look of a page while producing markup that is harder to maintain, less accessible, or more fragile in future edits, so governance has to cover both the rendered result and the underlying code.

Q: What are the signs that an agentic development workflow is failing?

A: Common signs include slow sessions, rising context usage, unclear tool-call sequences, repeated regressions, and changes that improve one example but fail on the next representative dataset. Those signals mean the team has implementation speed without enough behavioural evidence to trust release decisions.

Q: What should teams do when a design tool performs well on simple pages but breaks on complex ones?

A: Split the workflow by design class and apply stricter review to the layouts that sit outside the tool's strengths. If a canvas cannot express the reference faithfully, treat that as a control boundary and move the hardest cases into a different path.


Technical breakdown

Why canvas format changes agent output quality

A design MCP server is not neutral plumbing. It determines whether the agent works through an intermediate model of shapes and exports, or whether it writes and reads the same HTML and CSS that will ship. When the canvas is proprietary, the agent has to bridge a translation gap between design primitives and production code. When the canvas itself is HTML and CSS, the agent sees the real layout values directly, which reduces one source of drift but also ties output quality to the constraints of the target medium.

Practical implication: Choose the server whose canvas model matches the kind of artifact you actually want the agent to produce.

Why semantic HTML and visual similarity can diverge

Visual similarity only measures whether the page looks close to the reference. Semantic HTML measures whether the structure is meaningful to machines and assistive technologies. An agent can achieve the same screen appearance with very different markup quality, which matters for accessibility, maintainability, and future edits. That distinction becomes important when a toolchain optimises for visual reconstruction but quietly degrades the structure that downstream developers and assistive tech depend on.

Practical implication: Evaluate agent output on both rendered appearance and HTML structure before standardising a workflow.

Where consistency fails in agentic frontend workflows

Consistency problems usually show up on layouts that exceed the tool's native strengths. In this case, the weak points were not random noise but collapse modes on certain design types, such as flat illustrations and 3D-heavy compositions. That tells you the risk is architectural, not just model quality. Repeated checks can improve confidence, but they do not remove medium limits when the canvas cannot express the reference faithfully.

Practical implication: Build a fallback path for design types that sit outside the canvas's expressive range.


NHI Mgmt Group analysis

Toolchain choice has become a governance decision, not a convenience decision. When an agent can produce either a semantically rich artifact or a visually similar but structurally shallow one, the organisation is not only buying speed. It is choosing which form of risk it will tolerate in its delivery pipeline. The practical implication is that frontend agent governance has to cover output quality, maintainability, and provenance together.

Consistent agent output matters more than isolated best-case runs. A tool that ties on average but swings more between runs creates operational drag because teams cannot rely on the same control outcome every time. That is especially relevant for automation pipelines where the agent is expected to produce usable code repeatedly, not merely once in a benchmark. Practitioners should treat variance as a first-class risk signal.

HTML structure is a quality control plane, not just an implementation detail. The article shows that two agents can look equivalent on screen while producing very different markup. That gap matters for accessibility, downstream maintenance, and code review. For frontend agent programmes, semantic fidelity should be governed as part of the definition of done.

MCP creates a new trust boundary for agent-produced frontend code. The agent is no longer merely suggesting changes, it is operating through a tool that mediates what it can perceive and generate. That means the organisation has to govern the server selection, the allowed tools, and the review gates around generated output. The practical implication is to treat MCP-enabled workflows as a controlled production path, not an informal productivity boost.

For identity teams, the relevant issue is control over delegated tool use. Even though this article is about frontend generation, the same governance logic applies whenever software agents are allowed to operate through a tool on behalf of a human or workflow. The boundary between agent intent and system action needs explicit oversight, especially when those actions touch production assets.

From our research library:

What this signals

Canvas fidelity is now part of agent governance. When a design MCP server changes the structure of the generated artifact, teams should not evaluate it only as a productivity tool. The more useful control question is whether the server preserves the semantics, maintainability, and accessibility properties your delivery pipeline depends on.

Output variance is a stronger warning signal than average score. A frontend agent that performs well most of the time but collapses on a narrow class of layouts creates hidden operational debt. Programme owners should watch for those edge-case failures early, because they often reveal the real boundary of the workflow.

MCP-assisted design pipelines expose a new quality gate for frontend automation. The practical question is whether the agent can be trusted to move from prompt to code without introducing silent structural regressions. That is now a workflow governance problem, not just a model selection problem.


For practitioners

  • Define separate acceptance tests for visual fidelity and semantic structure Measure rendered similarity, accessibility landmarks, and maintainability, then decide which metric matters most for each class of page before adopting an MCP server.
  • Standardise on a server per layout class Use one MCP path for simple, text-heavy pages and another for design-heavy pages if the medium's strengths differ materially across your portfolio.
  • Add variance thresholds to agent evals Track run-to-run spread, not just averages, so a workflow that occasionally collapses on specific designs cannot pass on a single good run.
  • Gate generated code through human review for edge-case layouts Require manual inspection when the source design includes 3D elements, illustration-heavy compositions, or other patterns that the canvas handles poorly.

Key takeaways

  • The benchmark suggests that MCP server choice affects more than page resemblance, because it changes consistency, markup quality, and the cost of producing usable frontend code.
  • Paper's stronger consistency and lower cost on complex layouts show that average visual similarity alone is not enough to choose a design server for agentic workflows.
  • Teams should govern agentic frontend generation with separate checks for render fidelity, semantic HTML, and run-to-run variance, especially on atypical layouts.

Key terms

  • Design MCP Server: A design MCP server is a tool interface that lets an AI agent read, manipulate, and regenerate design artefacts during frontend creation. In practice, it determines whether the agent is working through a proprietary canvas, a code-native canvas, or another representation that affects fidelity, maintainability, and downstream code quality.
  • Semantic HTML: Semantic HTML uses elements that describe the meaning and structure of content, such as header, nav, and main. It matters because assistive technologies, browsers, and later developers can interpret the page more reliably when structure is explicit instead of hidden behind generic containers.
  • Run-to-run variance: The difference in outputs produced by the same model across repeated runs on the same task. In security analysis, high variance can hide findings in one pass and reveal them in another, which is why repeated evaluation often gives a truer operational picture.
  • Visual Similarity Score: A visual similarity score measures how closely a recreated interface matches the reference image. It is useful for judging appearance, but it does not by itself prove that the underlying markup is accessible, maintainable, or safe to automate at scale.

Deepen your knowledge

NHI Mgmt Group covers identity security, NHI governance, and agentic AI through independent research, practitioner guides, and the NHI Foundation Level course. Explore the NHI Foundation Level course if your programme needs a structured way to govern machine identity, agent identity, and delegated access.
NHIMG Editorial Note
Published by the NHIMG editorial team on August 18, 2026.
Updated on October 12, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org