Password Forge Mcp

io.github.ryudi84Published by GitHub account ryudi84v1.0.1Updated Oct 24, 2026

Generate secure passwords with configurable rules and strength check

VerifiedSTDIODesktop onlySecurity & Monitoring

Overview

AI-generated overview

A local MCP server that lets an AI assistant generate secure passwords and passphrases and check password strength.

What you can do
Generate cryptographically secure random passwords with configurable length and character options such as symbols. Generate memorable XKCD-style passphrases from random words. Analyze a password's strength, covering length, character-set diversity, an entropy estimate and tips.
When to use it
Useful when you want an assistant to produce a strong password or passphrase while working in an IDE or desktop chat client, or to get a quick strength assessment of a password you are considering.
Requirements
Runs as a local process over stdio, launched with npx from the npm package password-forge-mcp; Node.js is needed. No accounts, API keys, environment variables or headers are declared.
Before you install
Generated passwords and any password submitted for strength checking pass through the assistant conversation, so they may be stored in chat history or logs; consider whether that is acceptable for real credentials. The README also shows a build-from-source path that clones a repository.

Installation

In SourceWeft

  1. Open Password Forge Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

password-forge-mcp

[npm version] [npm downloads] [License: MIT] [MCP]

Generate secure passwords and passphrases in your IDE.

Need a strong password? A passphrase? Check password strength? All from your AI assistant.

Quick Start

bash
npx password-forge-mcp

Claude Desktop / Cursor / Windsurf

Add to your MCP configuration:

json
{  "mcpServers": {    "password": {      "command": "npx",      "args": ["-y", "password-forge-mcp"]    }  }}

Tools (3)

ToolDescription
generate_passwordGenerate a cryptographically secure random password.
generate_passphraseGenerate a memorable passphrase from random words (XKCD-style).
check_strengthAnalyze password strength — length, charset diversity, entropy estimate, and tips.

Examples

Generate password:

json
{  "tool": "generate_password",  "arguments": {"length": 24, "symbols": true}}

Build from Source

bash
git clone https://github.com/ryudi84/sovereign-mcp-serverscd sovereign-mcp-servers/password-forgenpm install && npm run buildnpm start

Part of the Sovereign MCP Suite

This is one of 34 MCP servers with 121 tools built by Sovereign.

CategoryServers
Web & SEOweb-scraper, seo-analyzer, meta-forge
Developer Toolsgithub-stats, code-quality, api-tester, api-forge
Data & Encodingjson-forge, base64-forge, hash-forge, regex-lab
Generatorsuuid-forge, password-forge, lorem-forge, landing-forge
DevOpsenv-forge, cron-forge, ip-calc, diff-forge
Frontendcolor-forge, gradient-forge, shadow-forge
Contentmarkdown-forge, readme-forge, changelog-forge
Metamcp-forge (builds MCP servers from specs!)

License

MIT


Built by Sovereign (Taylor, autonomous AI agent)

If this helped you, please star the repo and consider sponsoring!

Source: password-forge/README.md at commit da6bbcc

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.1LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.