api: log ingress request ids

apps/mcp-server/src/app.rs

@@ -38,6 +38,7 @@ use serde::{Deserialize, Serialize};
 use serde_json::{Value, json};
 use sha2::{Digest, Sha256};
 use time::{OffsetDateTime, format_description::well_known::Rfc3339};
+use tracing::info;
 
 use crate::{
     catalog::PublishedToolCatalog,
@@ -240,6 +241,13 @@ async fn mcp_post(
     Json(message): Json<Value>,
 ) -> Response {
     let transport_request_id = resolve_request_id(&headers);
+    info!(
+        request_id = %transport_request_id,
+        workspace_slug = %path.workspace_slug,
+        agent_slug = %path.agent_slug,
+        jsonrpc_method = method_name(&message).unwrap_or("<unknown>"),
+        "mcp request received"
+    );
 
     if let Err(status) = validate_origin(&state.allowed_origins, &headers) {
         return with_request_id_header(status.into_response(), &transport_request_id);

apps/mcp-server/src/main.rs

@@ -79,7 +79,12 @@ fn database_options_from_env() -> Result<PgConnectOptions, Box<dyn std::error::E
 
 #[cfg(test)]
 mod tests {
-    use std::{collections::BTreeMap, env, time::Duration};
+    use std::{
+        collections::BTreeMap,
+        env, io,
+        sync::{Arc, Mutex},
+        time::Duration,
+    };
 
     use axum::{
         Json, Router,
@@ -110,6 +115,7 @@ mod tests {
     use time::{OffsetDateTime, format_description::well_known::Rfc3339};
     use tokio::net::TcpListener;
     use tokio::time::sleep;
+    use tracing_subscriber::{filter::LevelFilter, fmt::MakeWriter, prelude::*};
 
     use crate::app::build_app;
 
@@ -117,6 +123,42 @@ mod tests {
         WorkspaceId::new("ws_default")
     }
 
+    #[derive(Clone, Default)]
+    struct SharedLogWriter {
+        buffer: Arc<Mutex<Vec<u8>>>,
+    }
+
+    impl SharedLogWriter {
+        fn output(&self) -> String {
+            String::from_utf8(self.buffer.lock().unwrap().clone()).unwrap()
+        }
+    }
+
+    impl<'a> MakeWriter<'a> for SharedLogWriter {
+        type Writer = SharedLogGuard;
+
+        fn make_writer(&'a self) -> Self::Writer {
+            SharedLogGuard {
+                buffer: Arc::clone(&self.buffer),
+            }
+        }
+    }
+
+    struct SharedLogGuard {
+        buffer: Arc<Mutex<Vec<u8>>>,
+    }
+
+    impl io::Write for SharedLogGuard {
+        fn write(&mut self, bytes: &[u8]) -> io::Result<usize> {
+            self.buffer.lock().unwrap().extend_from_slice(bytes);
+            Ok(bytes.len())
+        }
+
+        fn flush(&mut self) -> io::Result<()> {
+            Ok(())
+        }
+    }
+
     fn test_workspace_slug() -> &'static str {
         "default"
     }
@@ -410,6 +452,86 @@ mod tests {
         assert_eq!(logs[0].log.request_id.as_deref(), Some(request_id.as_str()));
     }
 
+    #[tokio::test]
+    async fn emits_request_id_in_mcp_ingress_logs() {
+        let registry = test_registry().await;
+        let upstream_base_url = spawn_upstream_server().await;
+        let operation = test_operation(&upstream_base_url, "crm_request_trace");
+
+        registry
+            .create_operation(&test_workspace_id(), &operation, Some("alice"))
+            .await
+            .unwrap();
+        registry
+            .publish_operation(PublishRequest {
+                workspace_id: &test_workspace_id(),
+                operation_id: &operation.id,
+                version: 1,
+                published_at: &OffsetDateTime::parse("2026-03-26T10:00:00Z", &Rfc3339).unwrap(),
+                published_by: Some("alice"),
+            })
+            .await
+            .unwrap();
+        publish_agent_for_operation(&registry, &operation, "sales-request-trace").await;
+        let api_key = create_platform_api_key(
+            &registry,
+            "mcp-request-trace",
+            &[PlatformApiKeyScope::Read, PlatformApiKeyScope::Write],
+        )
+        .await;
+
+        let base_url = spawn_mcp_server(build_test_app(
+            registry,
+            Duration::from_millis(0),
+            Some("https://crank.example.com".to_owned()),
+        ))
+        .await;
+        let client = reqwest::Client::new();
+        let mcp_url = agent_mcp_url(&base_url, "sales-request-trace");
+        let writer = SharedLogWriter::default();
+        let subscriber = tracing_subscriber::registry().with(
+            tracing_subscriber::fmt::layer()
+                .with_writer(writer.clone())
+                .without_time()
+                .with_ansi(false)
+                .with_target(false)
+                .compact()
+                .with_filter(LevelFilter::INFO),
+        );
+        let dispatch = tracing::Dispatch::new(subscriber);
+
+        let _guard = tracing::dispatcher::set_default(&dispatch);
+        let response = post_jsonrpc_response(
+            &client,
+            &mcp_url,
+            &api_key,
+            None,
+            Some("req_mcp_trace_123"),
+            json!({
+                "jsonrpc": "2.0",
+                "id": 1,
+                "method": "initialize",
+                "params": {
+                    "protocolVersion": "2025-03-26"
+                }
+            }),
+        )
+        .await;
+
+        assert_eq!(
+            response.headers()["x-request-id"].to_str().unwrap(),
+            "req_mcp_trace_123"
+        );
+        assert_eq!(response.status(), reqwest::StatusCode::OK);
+
+        let logs = writer.output();
+        assert!(logs.contains("mcp request received"));
+        assert!(logs.contains("req_mcp_trace_123"));
+        assert!(logs.contains("sales-request-trace"));
+        assert!(logs.contains("default"));
+        assert!(logs.contains("initialize"));
+    }
+
     #[tokio::test]
     async fn initializes_and_calls_published_graphql_tool_via_mcp() {
         let registry = test_registry().await;