fix(coderd/audit): retain identifiable MCP audit targets

ibetitsmike · Aug 19, 2026 · Aug 7, 2026 · Aug 7, 2026 · Aug 8, 2026 · Aug 8, 2026
commit e39972f9f860deedae268a4c58d3c1aa42457eea
diff --git a/coderd/audit/request.go b/coderd/audit/request.go
@@ -156,9 +156,9 @@ func ResourceTarget[T Auditable](tgt T) string {
 		// filter but not the primary resource identifier.
 		return typed.ID.String()[:8]
 	case database.MCPServerConfig:
-		// Updates can persist an empty display name; fall back to the
-		// slug so the audit entry stays identifiable and filterable.
-		return cmp.Or(typed.DisplayName, typed.Slug)
+		// Updates can persist an empty display name; fall back to the slug, or
+		// the ID if both are empty, so the audit entry stays identifiable.
+		return cmp.Or(typed.DisplayName, typed.Slug, typed.ID.String())
 	case database.UserSecret:
 		return typed.Name
 	case database.UserSkill:

diff --git a/coderd/audit/request_test.go b/coderd/audit/request_test.go
@@ -50,11 +50,15 @@ func TestResourceTarget_MCPServerConfigSlugFallback(t *testing.T) {
 	t.Parallel()
 
 	config := database.MCPServerConfig{
+		ID:          uuid.UUID{1},
 		DisplayName: "GitHub MCP",
 		Slug:        "github",
 	}
 	require.Equal(t, "GitHub MCP", audit.ResourceTarget(config))
 
 	config.DisplayName = ""
 	require.Equal(t, "github", audit.ResourceTarget(config))
+
+	config.Slug = ""
+	require.Equal(t, config.ID.String(), audit.ResourceTarget(config))
 }