Crypto PIR is a deep rabbit hole. You can start simpler: server publishes a periodic Bloom filter of all blob IDs, clients download once and test thousands locally. At Masters of The Lair we use that pattern too.