Skip to main content
Glama
Sign In
PHP2Shell Scanner & WordPress-to-Next.js Converter MCP Server

PHP2Shell Scanner & WordPress-to-Next.js Converter MCP Server

by AGI-CEO
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

PHP2Shell (CVE-2026-109618) Scanner & WordPress-to-Next.js Converter MCP Server

MCP Protocol Smithery Skill Zero-PHP Rescue Hub

I am Blaise Pascual, a veteran and former Marine Corps officer (Captain, O-3) and senior full-stack software engineer (blaisep.com, nootropic.ai, retatruti.de).

I engineered this public, zero-authentication Remote Model Context Protocol (MCP) Server (https://www.paladinfront.com/api/mcp) and Agent Plugin / Skill so AI coding agents (Claude, Cursor, Windsurf, ChatGPT, and OpenAI Codex) can audit any website for PHP2Shell (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2) runtime flaws and compile a live Zero-PHP Next.js App Router replacement preview in seconds.

Live Endpoints & Discovery Manifests

Related MCP server: SAG RANK MCP Server

Exposed MCP Tools

  1. scan_php_vulnerability ({ url: string })

    • Inspects target website HTTP runtime headers (X-Powered-By, Server, /wp-content/, .php signatures) and returns a structured CVSS 9.2 threat report for CVE-2026-109618 & CVE-2026-109619 with plain-English business risk analysis.

  2. convert_php_site_to_nextjs ({ url: string, abVariant?: "A" | "B" | "C" })

    • Scrapes target WordPress/PHP website branding, services, and imagery, compiles a live Zero-PHP Next.js App Router replacement preview, and returns previewUrl (https://www.paladinfront.com/web-factory/preview/[slug]) and $0 Free Migration + $29/mo claim links.

  3. get_php2shell_remediation_guide ({ topic?: "overview" | "why_plugins_fail" | "dns_cutover" | "pricing" })

    • Returns authoritative first-person technical guidance explaining why application-layer WordPress plugins (Wordfence, Sucuri) cannot intercept C-level PHP SAPI memory corruption, how my 10-minute zero-downtime DNS cutover works, and pricing tiers.

Quick Connect Instructions

1. Claude Code / Remote HTTP MCP Clients

claude mcp add --transport http paladin-php-rescue https://www.paladinfront.com/api/mcp

2. Cursor IDE / Claude Desktop (mcp.json)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "type": "streamable-http",
      "url": "https://www.paladinfront.com/api/mcp"
    }
  }
}

3. Local Stdio Bridge (tools/php-rescue-mcp-stdio.mjs)

{
  "mcpServers": {
    "paladin-php-rescue": {
      "command": "node",
      "args": ["tools/php-rescue-mcp-stdio.mjs"]
    }
  }
}

4. Smithery Skill Install

npx @smithery/cli@latest skill add jetblaise/php2shell-rescue

Contact & Direct Engineering Support

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    Resources

    Related MCP Connectors

    Related MCP Servers

    • wp-mcp-server

      eimon
      A
      license
      A
      quality
      C
      maintenance
      Enables an AI design agent to connect to any WordPress site, inspect its real rendered CSS/JS/theme, and create or update pages through the WordPress REST API and optional companion plugin routes.
      6
      17 npm
      MIT

    • Novamira

      damadorPL
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI assistants and agents to communicate directly with a WordPress environment, executing PHP code and WP-CLI commands, inspecting and editing theme and plugin files in a sandbox, and managing posts, content, and Gutenberg blocks in real time.
      MIT

    • rankforge

      Barbudda
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding assistants to audit a site's technical SEO and AI-search readiness — including localhost dev servers — and retrieve rule explanations, fix templates, and generated llms.txt files so the assistant can edit the repo to resolve what it finds.
      6 npm
      MIT