Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Use WordPress with: ChatGPT · Claude · Cursor · Claude Code · VS Code
Connect it
Settings → Connectors → Add custom connector
URL: https://paladinfront.com/api/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://paladinfront.com/api/mcp{
"mcpServers": {
"php-rescue-mcp": {
"url": "https://paladinfront.com/api/mcp"
}
}
}claude mcp add --transport http php-rescue-mcp https://paladinfront.com/api/mcp{
"servers": {
"php-rescue-mcp": {
"type": "http",
"url": "https://paladinfront.com/api/mcp"
}
}
}3 tools, pulled live
scan_php_vulnerabilityInspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).
convert_php_site_to_nextjsScrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
get_php2shell_remediation_guideReturns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
Alternatives in Other
Compare →
Transit MCPA
Trips, departures, alerts and vehicles for NYC, DC and the SF Bay Area.
Nibomo FlashcardsA
Read, write, and conversationally review open-source flashcards through split read/write MCP tools.
Fair Value MCP ServerA
Valuation MCP: DCF/NAV/CCA, WACC, derivatives, credit risk, fixed income, structured products.
Domain IntelligenceA
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
CHChangeThisFileA
1,000+ conversion routes plus translate, extract tables, compress. 25 free/month, then a free key.
TSTHORChain SwapA
Read-only THORChain swap quotes, liquidity pools, and network status.