Token entropy

Paste a session cookie, CSRF token, or any opaque string. The backend computes Shannon entropy using the same shannon_entropy function the session-cookie check uses, then maps the result against the _ENTROPY_CONFIRMED / _ENTROPY_LIKELY thresholds.