Developer API

Overview

The tracqr REST API lets you create, list, and delete QR codes, and page through raw scan events — all from your own code or automation pipelines.

Authentication

Generate an API key from Dashboard → Settings. Pass it as a Bearer token on every request:

Authorization: Bearer tracqr_<your-key>

Keys are hashed before storage — tracqr never sees your raw key after you copy it. If you lose it, revoke the old key from Dashboard → Settings and generate a replacement.

Rate limiting

Requests are limited to 60 per minute per API key. Every response includes these headers:

When the limit is exceeded the API returns 429 Too Many Requests. Back off and retry after X-RateLimit-Reset.

Returns all QR codes belonging to the authenticated user, newest first.

Response

{
  "codes": [
    {
      "id": "ab12cd34",
      "label": "Summer campaign",
      "destination": "https://example.com/landing",
      "redirect_url": "https://tracqr.io/r/ab12cd34",
      "expires_at": null,
      "created_at": "2026-06-01T12:00:00.000Z",
      "scan_count": 142,
      "is_expired": false
    }
  ]
}

Creates a new QR code. Pro accounts may have at most 100 QR codes.

Request body

{
  "destination": "https://example.com/landing",
  "label": "Summer campaign",
  "expires_at": "2026-12-31T23:59:59.000Z"
}

Response 201 Created

{
  "id": "ab12cd34",
  "redirect_url": "https://tracqr.io/r/ab12cd34",
  "created_at": "2026-06-27T09:00:00.000Z"
}

Permanently deletes a QR code and all of its scan history. This action cannot be undone.

Response 204 No Content

Empty body on success. Returns 404 if the code does not exist or belongs to a different account.

Returns paginated scan events for a single QR code, oldest first.

Query parameters

Response

{
  "scans": [
    {
      "scanned_at": "2026-06-15T08:34:12.000Z",
      "country": "US",
      "city": "New York",
      "device_type": "mobile"
    }
  ],
  "total": 142,
  "limit": 50,
  "offset": 0
}

To page through all scans, increment offset by limit until offset >= total.

Errors

All errors return JSON with a single error field:

{ "error": "Human-readable description" }