/api/snapshots/upload route