Generate cryptographic passwords and score strength (zxcvbn) via @mukundakatta/password-mcp — 2 tools, credential-free

@mukundakatta/password-mcp v0.1.0 — Password generation + strength scoring

Install: npm install @mukundakatta/password-mcp Entry: dist/server.js Transport: stdio Tools: 2 (generate, strength)

Tool: generate

Tool: strength

Returns: {score, guesses_log10, crack_time_display, warning, suggestions}

• score: 0-4 (0=terrible, 4=very strong)
• crack_time_display: human-readable ("less than a second", "centuries")
• warning: why it is weak ("This is a very common password", "This is a top-10 common password")
• suggestions: actionable advice array

Key findings

• Cryptographically random passwords (not Math.random)
• zxcvbn scoring (Dropbox library) — detects dictionary words, keyboard patterns, l33t speak, dates
• "correct horse battery staple" scores 4/4 with guesses_log10=20.33 — validates the XKCD passphrase approach
• "qwerty" scores 0 with warning "top-10 common password", guesses_log10=0.7
• Empty string handled gracefully (score 0, suggestions offered)
• `digits: false` param name — NOT numbers, the param is digits
• `exclude_ambiguous` removes 0/O/1/l/I/| for copy-paste friendly passwords
• Tool name is `strength` not score — calling score returns unknown tool error
• First call ~240ms (zxcvbn JIT), subsequent 8-60ms
• p50 latency: ~20ms after warm-up