Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Que pouvez-vous faire avec Paladin Front PHP Rescue & Zero-PHP Migration MCP ?
scan_php_vulnerability({ url: string })convert_php_site_to_nextjs({ url: string, abVariant?: "A" | "B" | "C" })get_php2shell_remediation_guide({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://www.paladinfront.com/api/mcp'
{
"mcpServers": {
"paladin-front-php-rescue-zero-php-migrat": {
"type": "http",
"url": "https://www.paladinfront.com/api/mcp"
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Sommaire
PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server
I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).
I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.
Live Endpoints & Discovery Manifests
- Remote Streamable HTTP MCP Server:
https://www.paladinfront.com/api/mcp - Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
- OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
- MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
- Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue
Exposed MCP Tools
scan_php_vulnerability({ url: string })- Inspects target website HTTP runtime headers (
X-Powered-By,Server,/wp-content/,.phpsignatures) and returns a structured CVSS 9.2 threat report forCVE-2026-109618&CVE-2026-109619with plain-English business risk analysis.
- Inspects target website HTTP runtime headers (
convert_php_site_to_nextjs({ url: string, abVariant?: "A" | "B" | "C" })- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns
previewUrl(https://www.paladinfront.com/web-factory/preview/[slug]) and$0 Free Migration + $29/moclaim links.
- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns
get_php2shell_remediation_guide({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })- Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.
Quick Connect Instructions
1. Claude Code / Remote HTTP MCP Clients
claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp
2. Cursor IDE / Claude Desktop (mcp.json)
{
"mcpServers": {
"paladin-php-rescue": {
"type": "streamable-http",
"url": "https://www.paladinfront.com/api/mcp"
}
}
}
3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)
{
"mcpServers": {
"paladin-php-rescue": {
"command": "node",
"args": ["tools/php-rescue-mcp-stdio.mjs"]
}
}
}
4. Smithery Skill Install
npx @smithery/cli@latest skill add jetblaise/php2shell-rescue
Contact & Direct Engineering Support
- Founder: Blaise Pascual
- Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
- Phone:
910-325-2161 - Email:
inbox@blaisep.com - Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session
Questions fréquentes
Qu'est-ce que Paladin Front PHP Rescue & Zero-PHP Migration MCP ?
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Comment installer Paladin Front PHP Rescue & Zero-PHP Migration MCP ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://www.paladinfront.com/api/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour Paladin Front PHP Rescue & Zero-PHP Migration MCP ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
Paladin Front PHP Rescue & Zero-PHP Migration MCP est-il open source ?
Oui. Son code est sur GitHub sous licence MIT.
Qui maintient Paladin Front PHP Rescue & Zero-PHP Migration MCP ?
Il est publié par AGI-CEO. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.