feat(mcp-server): enable observability and request origin logging

Enable Workers Observability and log request metadata (IP, country,
user-agent, origin, referer) to identify traffic sources at scale.

Author: caio-pizzol

apps/mcp-server/src/index.ts

@@ -67,6 +67,18 @@ export default {
 		const url = new URL(request.url);
 		const corsHeaders = getCorsHeaders(request, env);
 
+		// Log request origin for observability
+		console.log("incoming request", {
+			method: request.method,
+			path: url.pathname,
+			origin: request.headers.get("Origin") || "none",
+			referer: request.headers.get("Referer") || "none",
+			userAgent: request.headers.get("User-Agent") || "none",
+			ip: request.headers.get("CF-Connecting-IP") || "unknown",
+			country: request.headers.get("CF-IPCountry") || "unknown",
+			host: request.headers.get("Host") || "unknown",
+		});
+
 		// Handle CORS preflight
 		if (request.method === "OPTIONS") {
 			return new Response(null, {

apps/mcp-server/src/mcp.ts

@@ -149,6 +149,8 @@ async function handleToolsCall(
 ): Promise<JsonRpcResponse> {
 	const { name, arguments: args } = params as ToolCallParams;
 
+	console.log("mcp tool call", { tool: name, args });
+
 	if (!name) {
 		return {
 			jsonrpc: "2.0",

apps/mcp-server/wrangler.toml

@@ -7,5 +7,8 @@ compatibility_flags = ["nodejs_compat"]
 # wrangler secret put DATABASE_URL
 # wrangler secret put VOYAGE_API_KEY
 
+[observability]
+enabled = true
+
 [vars]
 # Non-secret environment variables can go here