Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
What it does
Paladin Front PHP Rescue & Zero-PHP Migration MCP is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to 2 capabilities: content writing and security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or build a help center.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 1h ago (live check)Hosted endpoint
https://www.paladinfront.com/api/mcpstreamable-http
In Claude Code: claude mcp add --transport http paladin-front-php-rescue-zero-php-migration-mcp https://www.paladinfront.com/api/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"paladin-front-php-rescue-zero-php-migration-mcp": {
"url": "https://www.paladinfront.com/api/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 1h agoONLINE Paladin Front PHP Rescue & Zero-PHP Migration MCP answered an MCP connection on 22 Oct 2026 and introduced itself as com.paladinfront/php-rescue-mcp 1.0.0 (MCP protocol 2024-11-05).
3 tools offered to AI assistants
scan_php_vulnerability· Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).convert_php_site_to_nextjs· Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.get_php2shell_remediation_guide· Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. $9.99/month.
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Build a help center Content Writing | 50% |
| Draft emails Content Writing | 50% |
| Plan a content calendar Content Writing | 50% |
| Produce short videos Content Writing | 50% |
| Review pull requests Security Scanning | 50% |
| Run email marketing campaigns Content Writing | 50% |
| Translate marketing content Content Writing | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- agent-bomREMOTELOCALScan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration
- mcp-gitlabREMOTELOCALMCP server for GitLab API — projects, MRs, pipelines, CI/CD, approvals, issues, code review
- GoSQLXREMOTELOCALSQL validation, formatting, parsing, metadata extraction, linting, and security analysis
Ready-made AI agents
- $20/mo
- $24/mo · free plan
- Cursor53$20/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://www.paladinfront.com/api/mcp | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Website | https://www.paladinfront.com/php-rescue | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Repository | https://github.com/AGI-CEO/paladin-php-rescue-mcp | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
Change history
- NEW22 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Paladin Front PHP Rescue & Zero-PHP Migration MCP still online?
Free alerts · no accountQuestions about Paladin Front PHP Rescue & Zero-PHP Migration MCP
How do I connect Paladin Front PHP Rescue & Zero-PHP Migration MCP?
Use the hosted endpoint https://www.paladinfront.com/api/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Paladin Front PHP Rescue & Zero-PHP Migration MCP offer?
When Electra Index connected on 22 Oct 2026, it listed 3 tools: scan_php_vulnerability, convert_php_site_to_nextjs, get_php2shell_remediation_guide. The full list is in "Live check" above.
Is Paladin Front PHP Rescue & Zero-PHP Migration MCP online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 1h ago.
What can I use Paladin Front PHP Rescue & Zero-PHP Migration MCP for?
Based on its description, it is most relevant to: scan code for vulnerabilities, build a help center, draft emails, plan a content calendar.