Hash and verify passwords with bcrypt (adjustable cost factor 4-15) via @mukundakatta/bcrypt-mcp (npx)

{
  "server": "@mukundakatta/bcrypt-mcp",
  "version": "0.1.0",
  "transport": "stdio",
  "install": "npm install @mukundakatta/bcrypt-mcp",
  "entry": "dist/server.js",
  "tools": ["hash", "verify"],
  "calls": [
    {
      "tool": "hash",
      "args": {
        "password": "hello123"
      },
      "result": {
        "hash": "$2b$10$aBWCLIgkUBbIkhtF3Wt8qOSLaDMtm/D6NetUGF1Xu0YCGK6rp0bs2"
      },
      "ms": 64
    },
    {
      "tool": "hash",
      "args": {
        "password": "hello123",
        "cost": 4
      },
      "result": {
        "hash": "$2b$04$pZG4a2Gf.BTYRfydkEl7y.q5HLi0/rmPY0bisPxfsIisvzq.FK/Rm"
      },
      "ms": 1
    },
    {
      "tool": "hash",
      "args": {
        "password": "secureP@ss!",
        "cost": 12
      },
      "result": {
        "hash": "$2b$12$A8tN4YdUbi2sqiPALTia1uIku4R/pW0es8goUjQuGpP7NIR4pIjtW"
      },
      "ms": 225
    },
    {
      "tool": "hash",
      "args": {
        "password": ""
      },
      "result": {
        "hash": "$2b$10$lka92fVohcmqrH/DMS7Pxe0REqJch1bfrTICx929IRoY5MZXip9dq"
      },
      "ms": 56
    },
    {
      "tool": "hash",
      "args": {
        "password": "şifre123"
      },
      "result": {
        "hash": "$2b$10$gnrh0BvQl.N6IOrjlhoov.ULvQ3RW.4tWn/61clkzc5n1UFD/pJJW"
      },
      "ms": 55
    },
    {
      "tool": "hash",
      "args": {
        "password": "aaa...(72 chars)"
      },
      "result": {
        "hash": "$2b$10$vnl22hf6NQtGQkFChi1PEer9iC6SMdwZOUIazmWfelh0eb2Jdyem2"
      },
      "ms": 56
    },
    {
      "tool": "hash",
      "args": {
        "password": "aaa...(73 chars)"
      },
      "result": {
        "hash": "$2b$10$SntBNEkEF49M6Ti89Z42y.aST60iHTDC6JXyVtoeVKRylVZtKkvgS"
      },
      "ms": 57
    },
    {
      "tool": "verify",
      "args": {
        "password": "hello123",
        "hash": "$2b$10$aBWCLIgk..."
      },
      "result": {
        "match": true
      },
      "ms": 57,
      "note": "correct password → true"
    },
    {
      "tool": "verify",
      "args": {
        "password": "wrong!",
        "hash": "$2b$10$aBWCLIgk..."
      },
      "result": {
        "match": false
      },
      "ms": 56,
      "note": "wrong password → false"
    },
    {
      "tool": "verify",
      "args": {
        "password": "hello123",
        "hash": "$2b$04$pZG4a2Gf..."
      },
      "result": {
        "match": true
      },
      "ms": 1,
      "note": "same password verifies against different-cost hash"
    },
    {
      "tool": "verify",
      "args": {
        "password": "",
        "hash": "$2b$10$lka92fVo..."
      },
      "result": {
        "match": true
      },
      "ms": 56,
      "note": "empty string verifies"
    },
    {
      "tool": "verify",
      "args": {
        "password": "şifre123",
        "hash": "$2b$10$gnrh0BvQ..."
      },
      "result": {
        "match": true
      },
      "ms": 57,
      "note": "Unicode (Turkish) verifies"
    },
    {
      "tool": "verify",
      "args": {
        "password": "sifre123",
        "hash": "$2b$10$gnrh0BvQ...(şifre hash)"
      },
      "result": {
        "match": false
      },
      "ms": 57,
      "note": "ASCII 's' ≠ Turkish 'ş'"
    },
    {
      "tool": "verify",
      "args": {
        "password": "aaa...(73 chars)",
        "hash": "$2b$10$vnl22hf6...(72-char hash)"
      },
      "result": {
        "match": true
      },
      "ms": 55,
      "note": "73-char input matches 72-char hash — confirms bcrypt truncation at 72 bytes"
    },
    {
      "tool": "verify",
      "args": {
        "password": "test",
        "hash": "not-a-real-hash"
      },
      "result": {
        "match": false
      },
      "ms": 1,
      "note": "malformed hash returns false, no error thrown"
    },
    {
      "tool": "hash",
      "args": {
        "password": "hello123",
        "cost": 4
      },
      "result": {
        "hash": "$2b$04$jPFgTshh...(different from first cost-4 hash)"
      },
      "ms": 1,
      "note": "NON-DETERMINISTIC: same password+cost → different hash (random salt)"
    }
  ],
  "summary": {
    "total_calls": 16,
    "success": 16,
    "failure": 0,
    "success_rate": "100%",
    "p50_ms": 55,
    "p95_ms": 225
  }
}