Bridge a verified resource-server identity into the Anubis MCP frame.

AttestoMCP.Plug.Authenticate (or AttestoPhoenix.Plug.Authenticate) verifies the access token and assigns a protocol-shaped context onto the conn under :attesto_context. The Anubis HTTP transport copies conn.assigns into frame.assigns, so that context is reachable as frame.assigns[:attesto_context] inside the server.

Anubis's own authorization machinery - the tools/list visibility filter, Frame.scopes/1, Frame.has_scope?/2, any per-tool scope gate - reads the identity from frame.context.auth (an Anubis.Server.Context field), which is nil until a host populates it. put_auth/1 performs that one projection: frame.assigns[:attesto_context] -> frame.context.auth, in the auth-claims map shape Anubis.Server.Context documents.

The bridge does not add application authorization policy such as role, tenant, or tool-visibility rules. It records the first verified issuer, subject, and OAuth client that reaches a host callback and rejects a different identity on a later callback in the same live session.

Host wiring

Call it in init/2 so initialization records the owner, then at the top of every request callback that uses the identity or session state:

def init(_client_info, frame) do
  {:ok, AttestoMCP.Anubis.put_auth(frame)}
end

def handle_request(request, frame) do
  frame = AttestoMCP.Anubis.put_auth(frame)
  # ... Anubis authorization now sees the verified identity ...
end

The module is compile-guarded on Anubis.Server.Frame: a resource server that does not depend on anubis_mcp never compiles it (mirroring how attesto core gates its optional Plug surface on Plug.Conn).