Paladin Front PHP Rescue & Zero PHP Migration MCP

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

1{2  "mcpServers": {3    "com.paladinfront.www-php-rescue-mcp": {4      "url": "https://paladinfront.com/api/mcp",5      "headers": {}6    }7  }8}

.cursor/mcp.jsonMCP server

Transport: http
Status: Remote

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://paladinfront.com/api/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http com.paladinfront.www-php-rescue-mcp https://paladinfront.com/api/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "com.paladinfront.www-php-rescue-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://paladinfront.com/api/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 1.0.0
Last checked: 2026-10-28

Stars: —
Tools: —
Uptime: —

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

No required environment variable is listed on this record.

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

Paladin Front PHP Rescue & Zero PHP Migration MCP is reached over HTTP.

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Last checked 2026-10-28. PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

From the publisher

Documentation

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.

Live Endpoints & Discovery Manifests

Remote Streamable HTTP MCP Server: https://www.paladinfront.com/api/mcp
Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue

Exposed MCP Tools

scan_php_vulnerability ({ url: string })
- Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.
convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })
- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.
get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
- Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp

2. Cursor IDE / Claude Desktop (`mcp.json`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}

4. Smithery Skill Install

npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Founder: Blaise Pascual
Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
Phone: 910-325-2161
Email: [email protected]
Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session

Paladin Front PHP Rescue & Zero PHP Migration MCP

com.paladinfront.wwwClaim this server

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Content Management

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

GitHub Website

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

1{2  "mcpServers": {3    "com.paladinfront.www-php-rescue-mcp": {4      "url": "https://paladinfront.com/api/mcp",5      "headers": {}6    }7  }8}

.cursor/mcp.jsonMCP server

Transport: http
Status: Remote

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://paladinfront.com/api/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http com.paladinfront.www-php-rescue-mcp https://paladinfront.com/api/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "com.paladinfront.www-php-rescue-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://paladinfront.com/api/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 1.0.0
Last checked: 2026-10-28

Stars: —
Tools: —
Uptime: —

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

No required environment variable is listed on this record.

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

Paladin Front PHP Rescue & Zero PHP Migration MCP is reached over HTTP.

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Last checked 2026-10-28. PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

From the publisher

Documentation

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

Live Endpoints & Discovery Manifests

Remote Streamable HTTP MCP Server: https://www.paladinfront.com/api/mcp
Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue

Exposed MCP Tools

scan_php_vulnerability ({ url: string })
- Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.
convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })
- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.
get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
- Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp

2. Cursor IDE / Claude Desktop (`mcp.json`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}

4. Smithery Skill Install

npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Founder: Blaise Pascual
Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
Phone: 910-325-2161
Email: [email protected]
Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Documentation

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

Live Endpoints & Discovery Manifests

Exposed MCP Tools

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

2. Cursor IDE / Claude Desktop (mcp.json)

3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)

4. Smithery Skill Install

Contact & Direct Engineering Support

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Documentation

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

Live Endpoints & Discovery Manifests

Exposed MCP Tools

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

2. Cursor IDE / Claude Desktop (mcp.json)

3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)

4. Smithery Skill Install

Contact & Direct Engineering Support

2. Cursor IDE / Claude Desktop (`mcp.json`)

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)

2. Cursor IDE / Claude Desktop (`mcp.json`)

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)