Password Pattern Validator

Security REST API MCP

Validate a password against configurable rules and return each check (pass/fail with severity), a 0-100 score, and a strength label. Required rules: minimum length plus optional uppercase, lowercase, digit, and special-character requirements. Recommended rules: no common passwords, no keyboard patterns, no 3+ repeated characters, no sequential runs. Also reports an entropy estimate.

This page documents the HTTP endpoint POST /api/tools/password-pattern-validator/execute. See the MCP reference →

Use in the browser View as Markdown

Call it over REST

POST https://api.findutils.com/api/tools/password-pattern-validator/execute · no API keys · 60 requests/min per IP

Execute — verified arguments

curl -X POST https://api.findutils.com/api/tools/password-pattern-validator/execute \
  -H "Content-Type: application/json" \
  -d '{
    "password": "Xk9#mQ2$vL7@pR4!"
  }'

Parameter schema for this endpoint

curl https://api.findutils.com/api/tools/password-pattern-validator

Interactive docs · OpenAPI 3.1 spec · All REST tools

Input schema

Argument	Type	Required	Description
password	string	yes	The password to validate.
min_length	integer	no	Minimum length. Default: 8. Default: 8.
require_uppercase	boolean	no	Require at least one uppercase letter. Default: true. Default: true.
require_lowercase	boolean	no	Require at least one lowercase letter. Default: true. Default: true.
require_number	boolean	no	Require at least one digit. Default: true. Default: true.
require_special	boolean	no	Require at least one special character. Default: true. Default: true.

Example arguments (verified)

{
  "password": "Xk9#mQ2$vL7@pR4!"
}

Also an MCP tool

Claude, Cursor, and any MCP client can call this tool as findutils:password_pattern_validator after one connect command.

Connect once

claude mcp add findutils --transport http https://mcp.findutils.com/

Open the MCP reference for Password Pattern Validator →

More Security tools

Base32 Encode

Encode UTF-8 text to RFC 4648 base32 (uppercase, "=" padding).

Data Sanitizer

Sanitize untrusted text and return the cleaned output, a list of changes made, and a risk level.

Dnpm Configurator

Returns the five files of a hardened Docker-based npm wrapper (the ./dnpm bash script, .dnpm/Dockerfile, docker-compose.node.yml, .dnpm/secc

Email Header Analyzer

Return a structured analysis of raw email headers: sender, recipient, subject, date, message id, the Received hop chain with per-hop delays,

Hash Comparison Tool

Hash text with SHA-1, SHA-256, SHA-384, or SHA-512 and compare the hex digest with an expected hash.

Jwt Decode

Decode a JWT header + payload.

Jwt Generator

Generate a signed JWT (HS256, HS384, or HS512 via HMAC) and return the token plus the decoded header and payload.

Jwt Security Validator

Decode a JWT and return a list of security checks (algorithm strength, expiration, not-before, issued-at, issuer, audience, subject, signatu