Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
我该使用它吗
质量与安全性
发现（1）
- LOWTool 'get_php2shell_remediation_guide' name length outside 3-30 range在 get_php2shell_remediation_guide 中
基于对工具定义和协议合规性的自动分析。
上下文开销
这是每次将服务器的工具加载到模型上下文窗口时所消耗的大致 token 数。数值越高，可用于其他任务的注意力就越少。
安装
一键安装
将以下内容添加到你的 `claude_desktop_config.json` 文件中：
{
"mcpServers": {
"paladin-php-rescue-mcp": {
"url": "https://www.paladinfront.com/api/mcp"
}
}
}远程端点
https://www.paladinfront.com/api/mcpstreamable-http它能做什么
工具清单
工具（3）
⚪scan_php_vulnerability(url)
Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).
输入模式
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "Target website URL (e.g. 'https://example.com') to inspect for PHP runtime exposure and PHP2Shell (CVE-2026-109618 & CVE-2026-109619)."
}
},
"required": [
"url"
]
}⚪convert_php_site_to_nextjs(url, abVariant)
Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.
输入模式
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "Target WordPress/PHP website URL to scrape and convert into a hardened, zero-PHP Next.js App Router preview."
},
"abVariant": {
"type": "string",
"enum": [
"A",
"B",
"C"
],
"default": "A",
"description": "Optional A/B testing paywall variant for the converted preview."
}
},
"required": [
"url"
]
}🟢get_php2shell_remediation_guide(topic)
Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.
输入模式
{
"type": "object",
"properties": {
"topic": {
"type": "string",
"enum": [
"overview",
"why_plugins_fail",
"dns_cutover",
"pricing"
],
"description": "Specific remediation topic. Omit to receive the complete briefing."
}
}
}社区
证据