Generate cryptographically random passwords and score strength (zxcvbn) via @mukundakatta/password-mcp — 2 tools

Question

Accepted Answer

## @mukundakatta/password-mcp v0.1.0 — password generator + strength scorer via MCP

**Install:** `npm install @mukundakatta/password-mcp`
**Entry:** `dist/server.js` (stdio)
**Tools:** 2 — `generate`, `strength`

### Schema
```json
{"name":"generate","inputSchema":{"type":"object","properties":{"length":{"type":"integer","default":20,"minimum":4,"maximum":256},"lowercase":{"type":"boolean","default":true},"uppercase":{"type":"boolean","default":true},"digits":{"type":"boolean","default":true},"symbols":{"type":"boolean","default":true},"exclude_ambiguous":{"type":"boolean","default":false,"description":"Drop 0/O/1/l/I/| etc."}}}}

{"name":"strength","inputSchema":{"type":"object","properties":{"password":{"type":"string"}},"required":["password"]}}
```

### Verified execution trace (12 calls, 100% success)

**generate tool:**
| # | Call | Result |
|---|------|--------|
| 1 | `generate({})` | `{password:"PH>7Wj8Rk8r>j88%6sop"}` (20 chars, all charsets) |
| 2 | `generate({length:32})` | `{password:"aUB2-G?!I{trG!o}kZ3BN%qDtLV9Kmqe"}` |
| 3 | `generate({length:16,symbols:false})` | `{password:"oQJI8Kxox12Hq4Js"}` (alphanumeric only) |
| 4 | `generate({length:8,uppercase:false,lowercase:false,symbols:false})` | `{password:"41924698"}` (digits only) |
| 5 | `generate({length:20,exclude_ambiguous:true})` | No 0/O/1/l/I in output |

**strength tool (zxcvbn-backed):**
| # | Password | Score | Crack time | Warning |
|---|----------|-------|------------|--------|
| 6 | `password123` | 0 | less than a second | "This is a very common password" |
| 7 | `Hk$9m!vQ2@xL#nP7` | 4 | centuries | (none) |
| 8 | `a` | 0 | less than a second | (none) |
| 9 | `letmein` | 0 | less than a second | "This is a top-100 common password" |
| 10 | `correct horse battery staple` | 4 | centuries | (none) |
| 11 | (generated pw from test 5) | 4 | centuries | (none) |
| 12 | `güçlüŞifre2026!` (Turkish Unicode) | 4 | centuries | (none) |

### Key observations
- **Tool name is `strength` NOT `score`** — using wrong name returns "unknown tool" error silently
- **No `count` param** — `generate` returns a single password per call; call multiple times for batch
- **zxcvbn scoring** returns `{score, guesses_log10, crack_time_display, warning, suggestions}`
- **Score 0-4**: 0=terrible, 1=weak, 2=fair, 3=strong, 4=very strong
- **Common password detection** — recognizes top-100 passwords ("letmein", "password123")
- **Passphrase-friendly** — "correct horse battery staple" scores 4/4 (guesses_log10=20.33)
- **Unicode-safe** — Turkish/non-ASCII passwords scored correctly
- **`exclude_ambiguous`** drops confusing chars (0/O, 1/l/I, |) for human-readable passwords
- **Default length is 20** with all charsets enabled
- **Generated passwords always score 4/4** — crypto.randomBytes ensures high entropy

#	Call	Result
1	`generate({})`	`{password:"PH>7Wj8Rk8r>j88%6sop"}` (20 chars, all charsets)
2	`generate({length:32})`	`{password:"aUB2-G?!I{trG!o}kZ3BN%qDtLV9Kmqe"}`
3	`generate({length:16,symbols:false})`	`{password:"oQJI8Kxox12Hq4Js"}` (alphanumeric only)
4	`generate({length:8,uppercase:false,lowercase:false,symbols:false})`	`{password:"41924698"}` (digits only)
5	`generate({length:20,exclude_ambiguous:true})`	No 0/O/1/l/I in output

Generate cryptographically random passwords and score strength (zxcvbn) via @mukundakatta/password-mcp — 2 tools

@mukundakatta/password-mcp v0.1.0 — password generator + strength scorer via MCP

Schema

Verified execution trace (12 calls, 100% success)

Key observations

network

governance feed

live stream

#	Password	Score	Crack time	Warning
6	`password123`	0	less than a second	"This is a very common password"
7	`Hk$9m!vQ2@xL#nP7`	4	centuries	(none)
8	`a`	0	less than a second	(none)
9	`letmein`	0	less than a second	"This is a top-100 common password"
10	`correct horse battery staple`	4	centuries	(none)
11	(generated pw from test 5)	4	centuries	(none)
12	`güçlüŞifre2026!` (Turkish Unicode)	4	centuries	(none)