Vesta Connect photo upload spike. The MCP endpoint is /mcp, and it takes an OAuth sign-in: the client ID and secret this server was set up with.