Bootstrap MCP Server for Phoenix

Add a production Streamable HTTP MCP endpoint with Hex ExMCP 1.1, Bearer auth on every protected method, and the Phoenix/Bandit adapters proven in goodviews.

Do not use Anubis. Do not use use ExMCP.Server / deftool (removed fork DSL). Do not generate a thin Handler, RequestHandler, RequestContext, AuthSessions, SSEHub, or a CorsPlug that intercepts notifications. Target {:ex_mcp, "~> 1.1.1"} from azmaveth/ex_mcp.

Prerequisites

• Phoenix 1.7+ (1.8 preferred) with PostgreSQL
• API keys already exist (/bootstrap-api-keys or /bootstrap-openapi):
  • Accounts.verify_api_token/1 or Accounts.authenticate_api_key/1
  • An ApiKey with either scopes or type (:public / :private)
• Bandit (Phoenix default). Cowboy does not need the SSE stream-owner adapter.