Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
ماذا يمكنك أن تفعل مع Paladin Front PHP Rescue & Zero-PHP Migration MCP؟
scan_php_vulnerability({ url: string })convert_php_site_to_nextjs({ url: string, abVariant?: "A" | "B" | "C" })get_php2shell_remediation_guide({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://paladinfront.com/api/mcp'
{
"mcpServers": {
"paladin-front-php-rescue-zero-php-migrat": {
"type": "http",
"url": "https://paladinfront.com/api/mcp"
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server
I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).
I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.
Live Endpoints & Discovery Manifests
- Remote Streamable HTTP MCP Server:
https://www.paladinfront.com/api/mcp - Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
- OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
- MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
- Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue
Exposed MCP Tools
scan_php_vulnerability({ url: string })- Inspects target website HTTP runtime headers (
X-Powered-By,Server,/wp-content/,.phpsignatures) and returns a structured CVSS 9.2 threat report forCVE-2026-109618&CVE-2026-109619with plain-English business risk analysis.
- Inspects target website HTTP runtime headers (
convert_php_site_to_nextjs({ url: string, abVariant?: "A" | "B" | "C" })- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns
previewUrl(https://www.paladinfront.com/web-factory/preview/[slug]) and$0 Free Migration + $29/moclaim links.
- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns
get_php2shell_remediation_guide({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })- Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.
Quick Connect Instructions
1. Claude Code / Remote HTTP MCP Clients
claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp
2. Cursor IDE / Claude Desktop (mcp.json)
{
"mcpServers": {
"paladin-php-rescue": {
"type": "streamable-http",
"url": "https://www.paladinfront.com/api/mcp"
}
}
}
3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)
{
"mcpServers": {
"paladin-php-rescue": {
"command": "node",
"args": ["tools/php-rescue-mcp-stdio.mjs"]
}
}
}
4. Smithery Skill Install
npx @smithery/cli@latest skill add jetblaise/php2shell-rescue
Contact & Direct Engineering Support
- Founder: Blaise Pascual
- Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
- Phone:
910-325-2161 - Email:
inbox@blaisep.com - Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session
الأسئلة الشائعة
ما هو Paladin Front PHP Rescue & Zero-PHP Migration MCP؟
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
كيف أثبّت Paladin Front PHP Rescue & Zero-PHP Migration MCP؟
يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://paladinfront.com/api/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج Paladin Front PHP Rescue & Zero-PHP Migration MCP إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل Paladin Front PHP Rescue & Zero-PHP Migration MCP مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون Paladin Front PHP Rescue & Zero-PHP Migration MCP؟
ينشره AGI-CEO. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.