EVevidenso
mcp-iframe-design-upload

Design Image

Stream a GCS image for the design_annotations rich-UI card.

Auth is the HMAC over the exact path (minted by build_image_url at the MCP chokepoint) — the sig only ever covers paths the server itself chose to expose, and can't be forged for other paths. No Firebase token needed, so the sandboxed iframe can load it directly via <img src> (img-src CSP whitelists this origin via _meta.ui.csp.resourceDomains).

get/v1/mcp/design-image

Request

  • Base URL
    https://api.evidenso.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Query parameters

pathstring required

GCS object path.

sigstring required

HMAC signature over the path.

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.