Feature

Manage QR codes from your own stack

A REST API to create, update, and manage QR codes with an API key, plus webhooks that notify your systems when events happen.

create-qr.sh
curl -X POST api.qrcado.com/v1/qr  -H "Authorization: Bearer ••••••"  -d '{ "type": "url", "name": "Menu" }'

What the API covers

The public API supports QR create, read, update and delete operations. It is intended for applications that need to provision or maintain QR records as part of an existing workflow.

A common pattern is to create a QR record when an order, product or campaign is created, store the returned identifier, then update the destination when the source record changes.

Build a reliable client

  • Issue a scoped key. Give the integration only the permissions it needs.
  • Use idempotency. Repeated requests should not create duplicate production records.
  • Handle problem responses. Errors follow RFC 9457-style problem details.
  • Paginate list requests. Do not assume every record returns in one response.
  • Rotate exposed keys. Treat API credentials like any other production secret.

What is outside the public API

The current public surface does not expose dashboard analytics, a raw per-scan feed or public bulk-generation endpoints. Bulk CSV jobs exist in the product interface. Outbound webhooks cover supported lifecycle events, but no webhook is emitted for each scan.

Practical uses

  • Provision a Website QR for every new campaign.
  • Create Product or PDF QR records from an internal catalog.
  • Update destinations when a document or product page moves.
  • Pause a QR when a source record is withdrawn.
  • Manage separate tenant or client records with your own ownership model.

QR code API FAQ

What can the API do?

Create, read, update and delete dynamic QR records over REST — with scoped API keys and idempotent requests, so retries never create duplicates.

How do I authenticate?

With a scoped API key generated in your account settings, sent on each request. Rotate it any time it might have been exposed.

Is there a rate limit?

Yes — 120 requests per minute per key. Business includes up to 100,000 API requests per month; Enterprise is unlimited. Starter and the free tier don’t include API access.

Are there webhooks?

Yes — webhooks cover QR, subscription, user and bulk lifecycle events. There is no per-scan webhook.

Does the API expose analytics?

No — the public API is a QR management surface. Scan analytics live in the dashboard, where you can also export them.

Build with Qrcado

Create an account, generate a scoped API key and automate your codes.