Paladin Front PHP Rescue & Zero-PHP Migration MCP

io.github.AGI-CEO/paladin-php-rescue-mcp · v1.0.0

New (7 days)

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2024-11-05
Rank score	—
Declared risk	Not declared (tools carry no read/destructive hints)
Capabilities declared	logging, prompts, resources, tools
Tool definitions	3 tools · with description 100% · input schema is an object 100% · read/destructive hints 0%

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

streamable-http · https://www.paladinfront.com/api/mcp

claude mcp add --transport http paladin-php-rescue-mcp https://www.paladinfront.com/api/mcp

{
  "mcpServers": {
    "paladin-php-rescue-mcp": {
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

scan_php_vulnerability
Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).
convert_php_site_to_nextjs
Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
get_php2shell_remediation_guide
Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.

Repository · Website · JSON · Text for agents · Registry updated 2026-10-22