Paladin Front PHP Rescue & Zero-PHP Migration MCP server

online · 100% uptime

by www.paladinfront.com·com.paladinfront.www/php-rescue-mcp·v1.0.0·1 stars

No reviews yet

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

A89/100grade A

Write a review Run it

What users say

No reviews yet

Be the first

Safety scan

A89/100

full report

Adoption

Growing

1 stars

Reviews

Write one

Nobody has reviewed Paladin Front PHP Rescue & Zero-PHP Migration MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Paladin Front PHP Rescue & Zero-PHP Migration MCP tools (3)

write = sends, deletes, buys or posts

convert_php_site_to_nextjsFree
Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
get_php2shell_remediation_guideFree
Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
scan_php_vulnerabilityFree
Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

no findings

–Code scanremote-only server, no package to scann/a
Live reliabilityremote reachable in 960ms20/20
Tool poisoning3 tool descriptions checked15/15
Auth qualityopen endpoint, read-only tools10/15
Maintenancelast push 2 days ago15/15
Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace7/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Paladin Front PHP Rescue & Zero-PHP Migration MCP compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 89/100; higher than 87% of 915 Security servers
Tools: 3; the typical Security server has 6
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Uptime: 100%; of our recent checks; the typical remote Security server answers 100%
Response time: 306 ms; faster than 37% of 547 Security servers
GitHub stars: 1; more than 60% of 587 Security servers

What its tools let an agent do: 3 read

Install Paladin Front PHP Rescue & Zero-PHP Migration MCP in Claude Code, Cursor or VS Code

claude mcp add --transport http php-rescue-mcp https://paladinfront.com/api/mcp

Add to Cursor

What the publisher says

From the Paladin Front PHP Rescue & Zero-PHP Migration MCP repository's README, as published. We do not edit it. Read it on GitHub

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.

Live Endpoints & Discovery Manifests

Remote Streamable HTTP MCP Server: https://www.paladinfront.com/api/mcp
Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue

Exposed MCP Tools

scanphpvulnerability ({ url: string })

Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.

convertphpsitetonextjs ({ url: string, abVariant?: "A" | "B" | "C" })

Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.

getphp2shellremediationguide ({ topic?: "overview" | "whypluginsfail" | "dnscutover" | "pricing" })

Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp

2. Cursor IDE / Claude Desktop (mcp.json)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}

4. Smithery Skill Install

npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Founder: Blaise Pascual
Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
Phone: 910-325-2161
Email: inbox@blaisep.com
Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session

Nothing above is checked by us. What we check is on the safety report.

Paladin Front PHP Rescue & Zero-PHP Migration MCP: common questions

Is Paladin Front PHP Rescue & Zero-PHP Migration MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the Paladin Front PHP Rescue & Zero-PHP Migration MCP safety report
How do I install Paladin Front PHP Rescue & Zero-PHP Migration MCP?: It runs remotely at paladinfront.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Paladin Front PHP Rescue & Zero-PHP Migration MCP need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Paladin Front PHP Rescue & Zero-PHP Migration MCP maintained?: The last commit was 12 days ago (2026-10-22). The latest release is v1.0.0.
Is Paladin Front PHP Rescue & Zero-PHP Migration MCP up?: 100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Paladin Front PHP Rescue & Zero-PHP Migration MCP?: Servers from other publishers that do the same job: Security MCP server, Rede MCP server and CodeInspectus MCP server.
How does Paladin Front PHP Rescue & Zero-PHP Migration MCP compare with other Security MCP servers?: safety score 89/100 (higher than 87% of 915 Security servers); tools 3 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Paladin Front PHP Rescue & Zero-PHP Migration MCP

Same job from other publishers: the closest match first, then the best rated.

Security MCP
Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
not reviewed
Growing
A
Rede
MCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokens
not reviewed
Established
B
CodeInspectus
Local-first MCP security scanner and CLI for AI-generated applications.
not reviewed
Established
C
Dep Scope
Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
not reviewed
Growing
A
NetsCLI
Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.
not reviewed
Growing
A

Run it through the gateway

With the gateway added, ask your agent for it by name:

agent prompt

call com.paladinfront.www/php-rescue-mcp → convert_php_site_to_nextjs

Free per call. Metered, capped by your key, logged for reliability.

Add the gateway (gw.mcp.market)

Rating: —
Safety grade: A · 89/100
Stars: 1
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Remote
Uptime: 100% · 28/28 checks
Version: 1.0.0
Category: Security
Last release: 2026-10-22

Endpoint

https://paladinfront.com/api/mcp

streamable-http

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/paladinfront-php-rescue-mcp.svg)](https://mcp.market/server/paladinfront-php-rescue-mcp)

How the badge works