Password Strength Analyzer API
Score passwords for entropy, estimated crack time, and common-password hits before shipping auth flows.
Overview
io.github.Br0ski777/password-strength is an MCP server for the Ship phase that scores passwords with entropy, crack-time estimates, and common-password detection via an x402-paid remote API.
What is this MCP server?
- Password strength scoring with entropy calculation.
- Crack-time estimation for guessed exposure scenarios.
- Detection of common and breached-style weak passwords.
- Remote MCP SSE at password-strength.api.klymax402.com with x402 micropayment.
- Version 1.1.0; open manifest via password-strength-x402 on GitHub.
- Remote MCP endpoint: https://password-strength.api.klymax402.com/mcp (SSE)
- Server version 1.1.0 per MCP schema 2025-12-11
What problem does it solve?
Indie teams ship weak default password rules because agents and devs lack a quick, consistent strength and crack-time signal during security review.
Who is it for?
Solo builders hardening signup and credential flows who want agent-accessible password analysis without embedding a heavy local library.
Skip if: Enterprise IAM with mandated HSM policies, passkey-only auth products, or teams forbidden from sending password strings to third-party APIs.
What do I get? / Deliverables
After connecting the MCP server, your agent can flag weak passwords and justify stricter policy with entropy and crack-time data in the same review loop.
- Strength scores with entropy and crack-time estimates returned to the agent
- Actionable signals for blocking common passwords and tightening signup validation
Recommended MCP Servers
Journey fit
How it compares
Focused password-strength MCP API, not a full secrets vault or penetration-testing skill pack.
Common Questions / FAQ
Who is io.github.Br0ski777/password-strength for?
Independent developers using MCP agents to review and improve password policies while shipping web apps, APIs, or tools with password auth.
When should I use io.github.Br0ski777/password-strength?
Use it in the ship and security pass before launch when you validate registration, reset, and admin password rules with measurable strength metrics.
How do I add io.github.Br0ski777/password-strength to my agent?
Register https://password-strength.api.klymax402.com/mcp as remote SSE MCP, configure x402 micropayment, and call the analyzer tools only on test or policy-review strings you are comfortable sending to the hosted API.