phpArchangel MCP Server
Precision-first PHP vulnerability scanner. Zero false positives by design.
About
phpArchangel is an evidence-driven PHP runtime security assessment tool. It detects exposure to the php2shell CVE class (CVE-2026-109618 / 109619) and uses a deterministic OOM Oracle to physically verify vulnerabilities rather than guessing based on headers. It is built on the "SecPipe Doctrine" (Zero False Positives by Design), making it safe to run against production without alert fatigue. It is designed for authorized pentesters, red teams, and security engineers who need auditable, reproducible proof of exploitability.
Security Report
phpArchangel is a PHP security scanner whose visible code runs active probes, including an OOM oracle that can crash target workers and an opt-in exploit chain. The MCP server exposes this capability over an HTTP transport with no visible authentication, so anyone who can reach the port may be able to trigger scans or the exploit path. The truncated source prevents full verification of the MCP server, the exploit module, and the config storage, so the score reflects the visible risk and is subject to revision. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
5 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"phparchangel": {
"args": [
"php-archangel-mcp"
],
"command": "uvx"
}
}
}Getting Started
Once installed, try these example prompts and explore these capabilities:
- 1"Scan example.com/index.php for php2shell exposure" -> Tool: scan_target
- 2"Verify if the PROBABLE finding on target is actually exploitable" -> Tool: confirm_cve
- 3"Generate a Markdown report for the last scan" -> Tool: report
Reviews
No reviews yet
Be the first to review this server!
More Security MCP Servers
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Lharries · Communication
Read, search, and send WhatsApp messages through your AI assistant
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
Memory
Freeby Modelcontextprotocol · Productivity
Knowledge graph-based persistent memory across sessions