Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Connect Remote server
claude mcp add --transport http paladin-php-rescue-mcp https://www.paladinfront.com/api/mcp
{
"mcpServers": {
"paladin-php-rescue-mcp": {
"url": "https://www.paladinfront.com/api/mcp"
}
}
}
{
"servers": {
"paladin-php-rescue-mcp": {
"type": "http",
"url": "https://www.paladinfront.com/api/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://www.paladinfront.com/api/mcp
Tools 3 found in our last check
scan_php_vulnerabilityInspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).
convert_php_site_to_nextjsScrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
get_php2shell_remediation_guideReturns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
Details
| Endpoint | https://www.paladinfront.com/api/mcp (Streamable HTTP) |
| First published | 22 Oct 2026 |
| Last updated | 22 Oct 2026 |
| Registry name | io.github.AGI-CEO/paladin-php-rescue-mcp |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
