Password Strength API

POST https://api.findutils.com/api/tools/password-strength/execute

Estimate password strength using character-class entropy. Returns a 0–4 score, a descriptive label, and actionable feedback. NOT a substitute for a full dictionary check (zxcvbn) — this is fast and offline-safe.

Open the tool Try it

Request body

application/json

password

string required

The password to evaluate.

Example arguments

Verified

{
  "password": "abc123"
}

Base32 Encode Encode UTF-8 text to RFC 4648 base32 (uppercase, "=" padding).
Csp Generate Build a Content-Security-Policy header from a preset (strict, typical, google-analytics) and/or your own directives, and get the header…
Data Sanitizer Sanitize untrusted text and return the cleaned output, a list of changes made, and a risk level.
Dnpm Configurator Returns the five files of a hardened Docker-based npm wrapper (the ./dnpm bash script, .dnpm/Dockerfile, docker-compose.node.yml…
Email Header Analyzer Return a structured analysis of raw email headers: sender, recipient, subject, date, message id, the Received hop chain with per-hop…
Hash Comparison Tool Hash text with MD5, SHA-1, SHA-256, SHA-384, or SHA-512 and compare the hex digest with an expected hash.

curl -X POST https://api.findutils.com/api/tools/password-strength/execute \
  -H "Content-Type: application/json" \
  -d '{
    "password": "abc123"
  }'

const response = await fetch('https://api.findutils.com/api/tools/password-strength/execute', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({"password":"abc123"}),
});
const data = await response.json();

import requests

response = requests.post(
    "https://api.findutils.com/api/tools/password-strength/execute",
    json={"password":"abc123"},
)
data = response.json()

$ch = curl_init('https://api.findutils.com/api/tools/password-strength/execute');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_HTTPHEADER => ['Content-Type: application/json'],
    CURLOPT_POSTFIELDS => '{"password":"abc123"}',
    CURLOPT_RETURNTRANSFER => true,
]);
$data = json_decode(curl_exec($ch), true);

Also an MCP tool

Call password_strength from Claude, Cursor or any MCP client. Same arguments, same output.

https://mcp.findutils.com

MCP reference

Rate limit: 60 a minute, per IP
Auth: None
REST id: password-strength
MCP name: password_strength
Category: Security
Machine-readable: openapi.json · markdown.md

Request body

Example arguments

More Security tools

More to explore