QR Code API - Dynamic Codes & Scan Analytics, Programmatically

What you get

How it works

1. 1

   Upgrade to Business - API access is included, alongside 5 team seats and a custom short-link domain.

2. 2

   Authenticate: sign in to get your session token (a 30-day JWT) and send it as the qrm_session cookie with your requests.

3. 3

   Pull your data: fetch any code's scan log as CSV from the export endpoint and automate your workflow around it.

Getting started

The API builds on the same two features the rest of the product runs on. If you haven't used them yet, start with dynamic QR codes - codes whose destination you can edit after printing - since those are the codes an integration can update and measure. Every dynamic code also comes with scan tracking, which logs each scan's time, device, and location; that scan log is what the export endpoint below returns.

The scan-analytics export is a plain authenticated HTTPS endpoint - no SDK, no special client:

# Download a code's full scan log as CSV
curl "https://qrmkr.io/api/export/<code-id>" \
  -H "Cookie: qrm_session=<session-token>" \
  -o scans.csv

const res = await fetch(`https://qrmkr.io/api/export/${codeId}`, {
  headers: { cookie: `qrm_session=${sessionToken}` },
});
const csv = await res.text();
// columns: timestamp,device,os,browser,country,city,referer

Authentication

Requests authenticate with your account's session token: signing in issues a JWT valid for 30 days, delivered as an HTTP-only cookie named qrm_session. Send that cookie with each request, keep the token secret - it grants full account access - and always call the API over HTTPS. Programmatic code creation and destination editing are part of the Business plan's API access - contact support@qrmkr.io after upgrading and we'll get your integration set up.

FAQ