PHP and WordPress docs

Working Security A

io.github.ladanyin/php-docsv1.0.0 GitHub verified

Read one current English page from the PHP manual or the WordPress code reference.

Developer Tools

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-04T16:48:32.570166Z",
      "publishedAt": "2026-11-04T16:48:32.570166Z",
      "statusChangedAt": "2026-11-04T16:48:32.570166Z"
    }
  },
  "server": {
    "name": "io.github.ladanyin/php-docs",
    "icons": [
      {
        "src": "https://firm.bestsmartgoods.com/icon.jpg",
        "sizes": [
          "163x82"
        ],
        "mimeType": "image/jpeg"
      }
    ],
    "title": "PHP and WordPress docs",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://php.bestsmartgoods.com/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "X-API-Key",
            "isSecret": true,
            "isRequired": true,
            "description": "API key from https://firm.bestsmartgoods.com/signup"
          }
        ]
      }
    ],
    "version": "1.0.0",
    "repository": {
      "url": "https://github.com/ladanyin/agentlane",
      "source": "github"
    },
    "websiteUrl": "https://php.bestsmartgoods.com/docs",
    "description": "Read one current English page from the PHP manual or the WordPress code reference."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://php.bestsmartgoods.com/mcp

X-API-Key (required)

API key from https://firm.bestsmartgoods.com/signup

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

query_php_docs Read-only

Read one current English manual page for a PHP symbol or a WordPress function, hook, or class. Returns the official page URL, the version line, the signature, the description, and the first official example. php.net pages are the live English HTML manual. WordPress pages are the live developer.wordpress.org reference. This is not an archive of older manuals and it does not search Laravel, Symfony, or Markdown docs. Costs 0.04 credit only when a page is returned. A missing API key, not_found, and fetch_failed are not charged. Pass the symbol, for example str_contains or wp_insert_post. Set source to php or wordpress, or omit it and a wp_ name uses WordPress. Set version, for example 8.3 or 6.7, to learn whether that release is covered by the page version line. version_applies is null when version is omitted or the page has no version line. User comments are not included. Key: https://firm.bestsmartgoods.com/signup

querystring, required

A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol.

sourcestring

php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net.

versionstring

Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add --transport http php-docs https://php.bestsmartgoods.com/mcp \
  --header 'X-API-Key: YOUR_X_API_KEY'

Headers

X-API-Key (required): API key from https://firm.bestsmartgoods.com/signup

Tools (1)

query_php_docs

read-only

Argument	Type	Description
query*	string	A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol.
source	string	php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net.
version	string	Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "query": {
      "type": "string",
      "description": "A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol."
    },
    "source": {
      "enum": [
        "php",
        "wordpress"
      ],
      "type": "string",
      "description": "php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net."
    },
    "version": {
      "type": "string",
      "description": "Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release."
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 4, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works

Try it

Call this server's tools from your browser. Nothing to install.

https://php.bestsmartgoods.com/mcp

X-API-Key (required)

API key from https://firm.bestsmartgoods.com/signup

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

query_php_docs Read-only

querystring, required

A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol.

sourcestring

php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net.

versionstring

Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add --transport http php-docs https://php.bestsmartgoods.com/mcp \
  --header 'X-API-Key: YOUR_X_API_KEY'

Headers

X-API-Key (required): API key from https://firm.bestsmartgoods.com/signup

Tools (1)

query_php_docs

read-only

Argument	Type	Description
query*	string	A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol.
source	string	php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net.
version	string	Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "query": {
      "type": "string",
      "description": "A PHP or WordPress symbol, for example str_contains or wp_insert_post. A short sentence is accepted when it contains the symbol."
    },
    "source": {
      "enum": [
        "php",
        "wordpress"
      ],
      "type": "string",
      "description": "php reads php.net. wordpress reads developer.wordpress.org. Omit it and a wp_ symbol uses WordPress, otherwise php.net."
    },
    "version": {
      "type": "string",
      "description": "Release to check, such as 8.3 or 6.7. The page is still the current manual. version_applies says whether the page version line includes this release."
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 4, 2026.

Hidden or reordered text

Overriding the model's instructions

Hiding actions from the user

Reading keys or credentials

Fake system tags

Steering other servers' tools

Pulling in the conversation

Smuggling parameters

Demanding to be used for everything

Steering away from web search

Download-and-run commands

Encoded blobs

Invisible characters

Credentials as tool arguments

Very long descriptions

Read and write hints

How the security check works