Doesn't the server know the token id? I didn't inspect the requests, but it's possible to send the token to the server. Therefore, can't they download the samp

Doesn't the server know the token id? I didn't inspect the requests, but it's possible to send the token to the server. Therefore, can't they download the sample just like the connected client?