Paladin Front PHP Rescue & Zero-PHP Migration MCP

io.github.AGI-CEO/paladin-php-rescue-mcpVersion 1.0.0

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Status

Responds229 msNov 14, 2026, 14:35 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://www.paladinfront.com/api/mcpResponds229 msNov 14, 2026, 14:35 UTC

No sign-in

claude mcp add --transport http paladin-php-rescue-mcp https://www.paladinfront.com/api/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: paladin-php-rescue-mcp
Remote MCP server URL: https://www.paladinfront.com/api/mcp

{
  "mcpServers": {
    "paladin-php-rescue-mcp": {
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

code --add-mcp '{"name":"paladin-php-rescue-mcp","type":"http","url":"https://www.paladinfront.com/api/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

3 tools

Tools of Paladin Front PHP Rescue & Zero-PHP Migration MCP
	Description		Read-only	Idempotent	Open world
`convert_php_site_to_nextjs`Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.	Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.	Not declared	Not declared	Not declared	Not declared
`get_php2shell_remediation_guide`Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.	Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.	Not declared	Not declared	Not declared	Not declared
`scan_php_vulnerability`Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).	Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).	Not declared	Not declared	Not declared	Not declared

Registry status: Active
Published: Oct 22, 2026
Updated: Oct 22, 2026
Website: https://www.paladinfront.com/php-rescue⁠ (opens in a new tab)
Repository: https://github.com/AGI-CEO/paladin-php-rescue-mcp⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared