# AttestoMCP v0.5.0 - Table of Contents

> Plug/Phoenix authentication helpers for protecting Model Context Protocol servers with Attesto.

## Pages

- [AttestoMCP](readme.md)

- Guides
  - [Wiring an MCP server](mcp_wiring.md)

- Changelog
  - [Changelog](changelog.md)

- License
  - [LICENSE](license.md)

## Modules

- [AttestoMCP.Test.Factory](AttestoMCP.Test.Factory.md): Test fixtures for exercising a host MCP server's Attesto pipeline.

- Setup
  - [AttestoMCP](AttestoMCP.md): Authentication helpers for HTTP-based Model Context Protocol servers.

- Plugs
  - [AttestoMCP.Plug.Authenticate](AttestoMCP.Plug.Authenticate.md): Authenticate a protected MCP endpoint with Attesto.
  - [AttestoMCP.Plug.ProtectResource](AttestoMCP.Plug.ProtectResource.md): Protect an HTTP MCP endpoint in one plug.
  - [AttestoMCP.Plug.RequireScopes](AttestoMCP.Plug.RequireScopes.md): Require scopes on a request authenticated by `AttestoMCP.Plug.Authenticate`.

- Routing
  - [AttestoMCP.MetadataController](AttestoMCP.MetadataController.md): Phoenix controller that serves RFC 9728 protected-resource metadata.
  - [AttestoMCP.Router](AttestoMCP.Router.md): Phoenix router macros for OAuth protected-resource metadata discovery.

- Metadata
  - [AttestoMCP.Metadata](AttestoMCP.Metadata.md): Builders for OAuth metadata used by HTTP MCP authorization.

- Scopes
  - [AttestoMCP.Scopes](AttestoMCP.Scopes.md): MCP-oriented scope naming conventions.

- Testing
  - [AttestoMCP.Test.DPoPAssertions](AttestoMCP.Test.DPoPAssertions.md): Shipped ExUnit assertions for the DPoP sender-constraint contract.
  - [AttestoMCP.Test.DPoPReplay](AttestoMCP.Test.DPoPReplay.md): Minimal DPoP replay callback for tests.

## Mix Tasks

- [mix attesto_mcp.install](Mix.Tasks.AttestoMcp.Install.md): Scaffolds an MCP protected resource into a Phoenix application

