Skip to main content
Glama
password-mcp

password-mcp

by MukundaKatta

password-mcp

npm mcp license

MCP server: generate strong passwords and score password strength with zxcvbn. Randomness comes from Node's crypto.randomBytes with rejection sampling so the distribution is uniform across the chosen alphabet.

Tools

generate

{ "length": 20, "exclude_ambiguous": true }

→ { "password": "aB3xK7nQ2wP9vR4zM8tL" }

Field

Default

Notes

length

20

4-256

lowercase

true

uppercase

true

digits

true

symbols

true

exclude_ambiguous

false

Drops 0 O 1 l I | etc.

At least one character from each enabled class is guaranteed.

strength

{ "password": "correct horse battery staple" }

→

{
  "score": 4,
  "guesses_log10": 17.34,
  "crack_time_display": "centuries",
  "warning": "",
  "suggestions": []
}

score is the zxcvbn 0-4 strength rating. guesses_log10 is the base-10 log of the estimated guesses needed.

Related MCP server: MCP Password Generator

Configure

{ "mcpServers": { "password": { "command": "npx", "args": ["-y", "@mukundakatta/password-mcp"] } } }

License

MIT.

Available Tools

2 tools
generateA

Generate a cryptographically random password. Enable lowercase/uppercase/digits/symbols (defaults: all on). Length 4-256.

Inputs: length, lowercase, uppercase, digits, +2 more.

strengthA

Score a password with zxcvbn. Returns score 0-4, guesses_log10, human crack-time, and feedback.

Inputs: password (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.9/5.0

    Scored across 2 tools

    Disambiguation5/5

    The two tools have completely distinct purposes: one generates passwords, the other evaluates their strength. There is no overlap or ambiguity.

    Naming Consistency4/5

    The names are simple and clear, but one is a verb ('generate') and the other is a noun ('strength'), which is a minor inconsistency. A more consistent pattern would be 'generatePassword' and 'checkStrength'.

    Tool Count5/5

    Two tools is appropriate for a focused password utility: generation and strength assessment. No extraneous tools, and the scope is well-defined.

    Completeness4/5

    The tool set covers the core password operations: generation and strength evaluation. It is missing features like hashing or breach checking, but the scope is reasonable for a minimal MCP server.

    Maintenance

    ActivityInactive
    ResponsivenessOutdated data

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      D
      maintenance
      Provides random number generation utilities, including a secure UUID generator powered by Node's crypto module.
      7
      72 npm
      3
      MIT
    • F
      license
      Not graded
      quality
      D
      maintenance
      Generates secure random passwords and memorable passphrases with customizable options including length, character types, emojis, and automatic strength evaluation using zxcvbn scoring.
      -
    • A
      license
      Not graded
      quality
      D
      maintenance
      Cryptographically secure random number generation and randomized resources, including tools for numbers, strings, dice rolls, UUIDs, and passphrases.
      4
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Analyzes password strength with entropy calculation and crack time estimation. Supports pay-per-call payments via x402 (USDC on Base L2) without requiring API keys or signup.
      MIT