How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

No required environment variable is listed on this record.

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

Paladin Front PHP Rescue & Zero PHP Migration MCP is reached over HTTP.

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Last checked 2026-11-08. PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Paladin Front PHP Rescue & Zero PHP Migratio MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://paladinfront.com/api/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http com.paladinfront.www-php-rescue-mcp https://paladinfront.com/api/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "com.paladinfront.www-php-rescue-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://paladinfront.com/api/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 1.0.0
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.

Live Endpoints & Discovery Manifests

Remote Streamable HTTP MCP Server: https://www.paladinfront.com/api/mcp
Zero-PHP Rescue Hub: https://www.paladinfront.com/php-rescue
OpenAPI 3.1.0 Spec: https://www.paladinfront.com/.well-known/openapi.json
MCP Server Card (SEP-2127): https://www.paladinfront.com/.well-known/mcp/server-card.json
Smithery Skill Listing: https://smithery.ai/skills/jetblaise/php2shell-rescue

Exposed MCP Tools

scan_php_vulnerability ({ url: string })
- Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.
convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })
- Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.
get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })
- Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp

2. Cursor IDE / Claude Desktop (`mcp.json`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}

4. Smithery Skill Install

npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Founder: Blaise Pascual
Zero-PHP Migration Hub: https://www.paladinfront.com/php-rescue
Phone: 910-325-2161
Email: [email protected]
Book 1-on-1 Session: https://tidycal.com/pascual/roadmap-session

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Paladin Front PHP Rescue & Zero PHP Migration MCP?

Does Paladin Front PHP Rescue & Zero PHP Migration MCP need an API key?

What transport does Paladin Front PHP Rescue & Zero PHP Migration MCP use?

When was Paladin Front PHP Rescue & Zero PHP Migration MCP last checked?

Documentation

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

Live Endpoints & Discovery Manifests

Exposed MCP Tools

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

2. Cursor IDE / Claude Desktop (mcp.json)

3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)

4. Smithery Skill Install

Contact & Direct Engineering Support

2. Cursor IDE / Claude Desktop (`mcp.json`)

3. Local Stdio Bridge (`tools/php-rescue-mcp-stdio.mjs`)