API Access

API Getting Started

Create, list, and delete QR code records in bulk, and export your library as CSV — available to Pro and Business tier accounts. See the full route reference for every endpoint.

Personal vs. business keys

There are two kinds of key, both generated by a logged-in account, never by the API itself:

Personal key — any Pro or Business account can generate one from My Profile, scoped to that account's own saved QR code library.
Business key — a business team's Writer or Admin members can each generate their own individually-attributed key from Business QR Library, scoped to the shared team library. An Admin can revoke any teammate's business key.

Each account gets at most one key per scope at a time — generate a new one after revoking the old one, not alongside it.

Making a request

Send the key in an x-api-key header against the API's own base URL (not the same host as the rest of the site):

curl -X POST https://env6gvgrne.execute-api.us-east-2.amazonaws.com/v1/qrcodes \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com", "name": "My first API code"}'

New keys can take a few minutes to become active after generation — if a request is rejected right after you create a key, wait a bit and try again before assuming something's wrong.

Rate limits

Personal keys: 2,000 requests/day, 5 requests/second (burst 10). Business keys: 10,000 requests/day, 10 requests/second (burst 20). Bulk-creation routes accept up to 50 records per call, so importing a few thousand codes only takes a couple dozen requests, not thousands.

Revoking a key

Delete a key from the same page you generated it on. Revocation takes effect immediately — a revoked key stops working right away, not at the end of some grace period.