Paladin Front PHP Rescue & Zero-PHP Migration MCP

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

我該用這個嗎

品質與安全性

A
說明品質
100%
結構描述完整度
97%
命名品質
87%
汙染風險
100%
權限相符程度
100%
協定合規性
100%

發現項目(1)

  • LOWTool 'get_php2shell_remediation_guide' name length outside 3-30 range在 get_php2shell_remediation_guide 中

根據工具定義與協定合規性的自動化分析。

上下文成本

~391Token(工具定義)
~775 B典型回應大小
極小的注意力影響(128k 上下文的 0.31%)

這是每次將伺服器的工具載入模型上下文時所消耗的約略 token 數量。數量越高,可用於其他工作的注意力就越少。

安裝

一鍵安裝

將以下內容加入你的 `claude_desktop_config.json` 檔案:

{
  "mcpServers": {
    "php-rescue-mcp": {
      "url": "https://paladinfront.com/api/mcp"
    }
  }
}

遠端端點

https://paladinfront.com/api/mcpstreamable-http

它能做什麼

工具清單

工具(3)

🟢 唯讀🟡 寫入🔴 刪除⚪ 未知
⚪scan_php_vulnerability(url)

Inspects a website URL for PHP runtime signatures (X-Powered-By, Server, WordPress cookies/assets) and evaluates exposure to the critical PHP2Shell vulnerability (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2).

輸入結構描述

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target website URL (e.g. 'https://example.com') to inspect for PHP runtime exposure and PHP2Shell (CVE-2026-109618 & CVE-2026-109619)."
    }
  },
  "required": [
    "url"
  ]
}
⚪convert_php_site_to_nextjs(url, abVariant)

Scrapes a target WordPress or PHP website, extracts business branding, headings, services, and photos, and compiles a hardened, zero-PHP Next.js App Router live preview with Stripe claim integration.

輸入結構描述

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target WordPress/PHP website URL to scrape and convert into a hardened, zero-PHP Next.js App Router preview."
    },
    "abVariant": {
      "type": "string",
      "enum": [
        "A",
        "B",
        "C"
      ],
      "default": "A",
      "description": "Optional A/B testing paywall variant for the converted preview."
    }
  },
  "required": [
    "url"
  ]
}
🟢get_php2shell_remediation_guide(topic)

Returns authoritative first-person guidance from Blaise Pascual explaining how PHP2Shell (CVE-2026-109618) works, why security plugins cannot stop it, the 10-minute DNS cutover process, and pricing tiers.

輸入結構描述

{
  "type": "object",
  "properties": {
    "topic": {
      "type": "string",
      "enum": [
        "overview",
        "why_plugins_fail",
        "dns_cutover",
        "pricing"
      ],
      "description": "Specific remediation topic. Omit to receive the complete briefing."
    }
  }
}

社群

為此伺服器評分

證據

近期觀測

已驗證未記錄版本3 個工具