We have an MCP app (a commerce platform; submitted, currently in review). Its list_products tool returns products that include a public image URL for each product. The images are on a public CDN: HTTP 200, image/webp, no hotlink protection, and they open…