Skip to main content
Glama
Sign In

Paladin Front PHP Rescue & Zero-PHP Migration MCP

by io.github.AGI-CEO
OverviewDiscussionsAdmin

Server Details

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2024-11-05
URL
Repository
AGI-CEO/php2shell-wordpress-to-nextjs-mcp
GitHub Stars
1
Server Listing
PHP2Shell Scanner & WordPress-to-Next.js Converter MCP Server
ChatGPT
–
Claude
–

TDQS

A3.6/5.0

Scored across 3 tools

Disambiguation5/5

The three tools cover clearly separable actions: scanning a site for vulnerability exposure, converting a PHP site to Next.js, and retrieving a remediation/pricing guide. Although scan and convert both take a URL, their descriptions make the boundary unambiguous (diagnose vs. migrate).

Naming Consistency5/5

All names use a consistent snake_case verb_noun pattern (convert_..., get_..., scan_...) with the object of the action clearly stated. No mixed conventions or vague verbs.

Tool Count4/5

Three tools is on the lean side but matches the narrow, funnel-shaped scope of a scan-to-migration service. Each tool earns its place, though one could argue for a status/result-retrieval tool.

Completeness3/5

The surface covers the core funnel (diagnose, migrate, learn/remediate) but has notable gaps: no way to check conversion progress or retrieve a past conversion's output, no customization options for the migration, and no post-conversion support or rollback path.

Available Tools

3 tools
convert_php_site_to_nextjsBInspect

Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.

Inputs: url (required), abVariant.

get_php2shell_remediation_guideAInspect

Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.

Inputs: topic.

scan_php_vulnerabilityBInspect

Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).

Inputs: url (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • Kelp

      Mic52M
      A
      license
      A
      quality
      B
      maintenance
      Static security scanner for AI-generated (vibe-coded) Supabase and Next.js apps. Runs as an MCP server so an LLM can scan, explain findings, and produce fixes while it writes code, all locally and offline.
      5
      45 npm
      MIT

    • hivemind-mcp

      consecrating
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI assistants to run WordPress site reconnaissance, malware/CVE security scans, SEO-spam/cloaking detection, and end-to-end natural-language goals through a stdio MCP interface, with the target site configured via environment variables.
      MIT
    Try in Browser
    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources