Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Connector by www.paladinfront.comOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/www-paladinfront-com-php-rescue-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://paladinfront.com/api/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 3 read · 0 write · 0 deleteRead-only
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 3
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 3 · Look things up without changing anything.
convert_php_site_to_nextjsget_php2shell_remediation_guidescan_php_vulnerability
Network hosts it talks to 1
paladinfront.com· found in remote endpoint, install command
Tools (3)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
convert_php_site_to_nextjsScrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
get_php2shell_remediation_guideReturns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
scan_php_vulnerabilityInspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 22, 2026 (6 days ago)
- Last release
- Oct 22, 2026 (6 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
com.paladinfront.www/php-rescue-mcp- Version
- 1.0.0
- Auth
- Auth not stated
- License
- MIT
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Same server elsewhere
Copies of this server published by others; search shows only one of them.
Cite this page
Paladin Front PHP Rescue & Zero-PHP Migration MCP. Agent Mart. https://agentmart.dev/connectors/www-paladinfront-com-php-rescue-mcp (last updated 2026-10-24)