English Français العربية

Paladin Front PHP Rescue & Zero-PHP Migration MCP

Official registry Other

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Source code Website Documentation

What can you do with Paladin Front PHP Rescue & Zero-PHP Migration MCP?

  • scan_php_vulnerability ({ url: string })
  • convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })
  • get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://www.paladinfront.com/api/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "paladin-front-php-rescue-zero-php-migrat": {
            "type": "http",
            "url": "https://www.paladinfront.com/api/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server
  2. Live Endpoints & Discovery Manifests
  3. Exposed MCP Tools
  4. Quick Connect Instructions
  5. Contact & Direct Engineering Support

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.

Live Endpoints & Discovery Manifests

Exposed MCP Tools

  1. scan_php_vulnerability ({ url: string })
    • Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.
  2. convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })
    • Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.
  3. get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
    • Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients
claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp
2. Cursor IDE / Claude Desktop (mcp.json)
{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}
3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)
{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}
4. Smithery Skill Install
npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Frequently asked questions

What is Paladin Front PHP Rescue & Zero-PHP Migration MCP?

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

How do I install Paladin Front PHP Rescue & Zero-PHP Migration MCP?

It runs as a remote server. In Claude Code: claude mcp add --transport http paladin-front-php-rescue-zero-php-migrat 'https://www.paladinfront.com/api/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Paladin Front PHP Rescue & Zero-PHP Migration MCP need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Paladin Front PHP Rescue & Zero-PHP Migration MCP open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains Paladin Front PHP Rescue & Zero-PHP Migration MCP?

It is published by AGI-CEO. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.