API keys: create and manage codes from your own systems

Make a key

1. 1
   Open Account, then API keys

   Name the key after what will use it (POS integration, website) and tick the scopes it needs: read codes, write codes, read analytics, read domains.

2. 2
   Copy it once

   It looks like qrf_live_… and is shown a single time; we keep only a hash. If you lose it, revoke it and make a new one.

3. 3
   Send it as a bearer token

   Authorization: Bearer qrf_live_… on every request to https://qrflow.codes/api/v1. Try GET /me first.

Rules

• Keys are for servers. Never put one in a web page, a mobile app or a shared spreadsheet.
• 600 requests a minute per key; up to 10 keys per account. Bulk through the API counts against the same monthly allowance as the Bulk page.
• Codes created by a key show the key's name as their source on the Dashboard.
• If the account leaves Business, keys keep working for 30 days, then answer 402 until Business is back. Nothing is deleted.

• Developer docs

  Quick start, every endpoint, the Code object, limits and errors.
• Build recipes

  Next.js, Express, Workers, Supabase, Python, bulk CSV, OAuth, Zapier.
• Prompts to paste into Claude, ChatGPT or Cursor

  Tell your coding assistant exactly what to build.
• Troubleshooting

  Every error code: what caused it and what fixes it.
• Webhooks

  The other direction: we call you when a code is scanned or changed.
• Team seats

Ask Claude or ChatGPT to make a code

Add QRFLOW as a connector (Claude: Customize, Connectors, Add custom connector, or press Connect on the directory listing; ChatGPT: Developer mode, then Plugins). Sign in to QRFLOW once and click Allow. From then on you can say "make a QR code for our fall menu page" or "how many scans did the poster get last week" and the assistant does it in your account. This sign-in works on every plan; what the assistant can make follows your plan like the dashboard.

• Use QRFLOW from Claude, ChatGPT and other assistants

  The plain-words how-to: connect, ask, disconnect.
• MCP for developers: every client and the tool list

  Claude, ChatGPT, Claude Code, Cursor, your own agent.

Webhooks

Account, Webhooks: give us an https URL and pick events. Scans arrive in batches every few minutes; code.created, code.updated and code.deleted arrive at once when the change came through the API or an assistant and within minutes from the dashboard. Every call is signed (X-QRFLOW-Signature) with a secret shown once; the developer page has the verification snippet. Six retries over twelve hours; twenty failures in a row switch a webhook off and we email you.

• Webhooks: payloads, signature check, retries

  Working receivers for Next.js and Python.