KosmoRate file server
POST /api/upload with X-API-Key header.