Skip to main content
Glama

Paladin Front PHP Rescue & Zero-PHP Migration MCP

by io.github.AGI-CEO
OverviewDiscussionsAdmin

Server Details

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2024-11-05
URL
Repository
AGI-CEO/php2shell-wordpress-to-nextjs-mcp
GitHub Stars
1

TDQS

Score is being calculated.

Available Tools

3 tools
convert_php_site_to_nextjsInspect

Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesTarget WordPress/PHP website URL to scrape and convert into a hardened, zero-PHP Next.js App Router preview.
abVariantNoOptional A/B testing paywall variant for the converted preview.A
get_php2shell_remediation_guideInspect

Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.

ParametersJSON Schema
NameRequiredDescriptionDefault
topicNoSpecific remediation topic. Omit to receive the complete briefing.
scan_php_vulnerabilityInspect

Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesTarget website URL (e.g. 'https://example.com') to inspect for PHP runtime exposure and PHP2Shell (CVE-2026-109618 & CVE-2026-109619).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updates
    • First observedconvert_php_site_to_nextjs
    • First observedget_php2shell_remediation_guide
    • First observedscan_php_vulnerability

Related MCP Connectors

Related MCP Servers

  • Kelp

    Mic52M
    A
    license
    A
    quality
    A
    maintenance
    Static security scanner for AI-generated (vibe-coded) Supabase and Next.js apps. Runs as an MCP server so an LLM can scan, explain findings, and produce fixes while it writes code, all locally and offline.
    5
    16 npm
    MIT

  • Kali MCP Pentest Server

    andrew-stclair
    F
    license
    Not graded
    quality
    B
    maintenance
    Enables users to perform security testing and penetration testing tasks through a Docker-based API that provides access to popular security tools like nmap, nikto, sqlmap, wpscan, dirb, and searchsploit. Designed for educational purposes with input sanitization and non-root execution for safer pentesting workflows.
    -
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources