Password strength
password_strengthEstimate how guessable a password is with zxcvbn pattern matching (dictionary words, common passwords, keyboard walks, sequences, dates, l33t). Returns a 0-4 score, estimated guesses, entropy in bits, crack times for online and offline attacks, warnings, suggestions and NIST SP 800-63B-4 length checks. The password is not echoed back.
Returns: JSON { score 0-4, label, length, guesses, guesses_log10, entropy_bits, character_pool_entropy_bits, character_classes[], crack_times[{scenario, seconds, display}], warning, suggestions[], patterns[{pattern, start, end, description}], nist_sp800_63b{...} }. The password itself is never included.
Example input: {"password":"Tr0ub4dor&3","user_inputs":["alice"]}
On error, includes hint: password must be a string of at most 256 characters; user_inputs is an optional array of strings.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"password": "<password>"
},
"name": "password_strength"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | The password to analyse (up to 256 characters). | |
| user_inputs | No | Optional personal words (name, username, site name) that make the password easier to guess if it contains them. |