The client would have to utilize a standard API with configurable credentials. The creds part should be easy. Priv key is on device and could sign its request. Server just needs to verify before accepting upload.