> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanova.io/llms.txt
> Use this file to discover all available pages before exploring further.

# List QR codes

> GET /qr/

Lists or creates QR codes on the **Management API** host (`management.scanova.io`), authenticated with your raw Management API key — see the [overview](/api-reference/management-api/overview) if you haven't set that up yet.

```
GET  https://management.scanova.io/qr/
POST https://management.scanova.io/qr/
Authorization: 401f7ac837da42b97f613d789819ff93537bee6a
```

`GET /qr/` returns a paginated, filterable list of the QR codes owned by the account the key belongs to.

### Query parameters

<ParamField query="search" type="string">
  Free-text search against QR name, `qrid`, dynamic URL slug, and folder name.
</ParamField>

<ParamField query="category" type="string">
  Comma-separated category slugs, e.g. `url,event`. Matches any of the listed categories.
</ParamField>

<ParamField query="tags" type="string">
  Comma-separated tag names. Matches any of the listed tags.
</ParamField>

<ParamField query="type" type="string">
  Comma-separated QR types: `dy` (Dynamic), `st` (Static).
</ParamField>

<ParamField query="folder" type="integer">
  Folder ID — returns only QR codes in that folder.
</ParamField>

<ParamField query="created_from" type="string">
  ISO date. Returns QR codes created on or after this date.
</ParamField>

<ParamField query="created_till" type="string">
  ISO date. Returns QR codes created on or before this date.
</ParamField>

<ParamField query="ordering" type="string">
  One or more of `name`, `created`, `qr_type`, `category__name`, comma-separated. Prefix a field with `-` to sort descending, e.g. `ordering=-created`.
</ParamField>

<ParamField query="page" type="integer" default="1">
  Page number.
</ParamField>

<ParamField query="page_size" type="integer" default="10">
  Results per page, up to a maximum of `100`.
</ParamField>

<ResponseExample>
  ```json 200 OK theme={null}
  {
    "count": 214,
    "next": 2,
    "previous": null,
    "results": [
      {
        "id": 88231,
        "qrid": "QR7K9M2XN",
        "name": "Product launch flyer",
        "qr_type": "dy",
        "qr_type_display": "Dynamic",
        "category": {
          "id": 1,
          "name": "Website URL",
          "slug": "url",
          "description": "Link a QR code straight to any website.",
          "preview_image": "https://cdn.scanova.io/categories/url.png",
          "allowed_qr_types": ["dy", "st"],
          "allowed_qr_types_display": ["Dynamic", "Static"],
          "is_active": true
        },
        "dynamic_url_object": {
          "url_hash": "a1b2c3",
          "complete_url": "https://qr.link/a1b2c3",
          "visit_count": 1042
        },
        "thumbnail": "https://cdn.scanova.io/thumbnails/QR7K9M2XN.png",
        "is_active": true,
        "folder": null,
        "created": "2026-06-02T14:03:11Z",
        "modified": "2026-08-10T08:41:02Z",
        "tags_list": ["campaign-2026", "print"],
        "is_password_protected": false,
        "is_age_restricted": false,
        "created_by": { "full_name": "Jordan Lee" },
        "published_at": "2026-06-02T14:05:00Z",
        "is_currently_draft": false
      }
    ]
  }
  ```
</ResponseExample>

<Warning>
  `next` and `previous` are **page numbers** (or `null`), not full URLs — this API's pagination differs from plain DRF `PageNumberPagination` in that respect. Fetch the next page with `?page=2`, not by following a URL from the response.
</Warning>

<Note>
  `category` is the full category object — the fields shown above are a representative subset; the same object also carries `tags`, `is_new`, `has_landing_page`, `helpdesk_link`, `qr_name_pattern`, `created`, and `modified`. `dynamic_url_object` is only present for Dynamic (`dy`) QR codes.
</Note>

## Related

* [Create a QR code](/api-reference/management-api/qr/create) — the other operation on this same endpoint.
* [Retrieve](/api-reference/management-api/qr/retrieve) — operate on a single QR code returned by this list.
* [Update](/api-reference/management-api/qr/update) — operate on a single QR code returned by this list.
* [Delete](/api-reference/management-api/qr/delete) — operate on a single QR code returned by this list.
* [Download a QR code image](/api-reference/management-api/qr/download) — render one of these QR codes as a PNG/SVG/PDF/etc.
* [List trashed QR codes](/api-reference/management-api/qr/trash) — where a QR code goes after being deleted from this list.
* [Management API overview](/api-reference/management-api/overview) — the auth scheme and quota rules that apply to this endpoint.


## OpenAPI

````yaml api-reference/openapi/management-api.json GET /qr/
openapi: 3.1.0
info:
  title: Scanova Management API (v2)
  description: >-
    The complete Scanova Management API — every endpoint available at
    management.scanova.io (QR codes, folders, tags, leads, forms, analytics,
    plans, shared users & roles), plus the token-creation and usage-stats
    endpoints used to authenticate against it. Every path and request/response
    shape below was verified live against a real API key and the actual running
    backend (Phase 7, 2026-08-16) — not guessed from reading urls.py alone.
  version: 2.0.0
servers:
  - url: https://management.scanova.io
    description: Management API — QR/folder/tag/lead/form/analytics/plans endpoints
security:
  - apiKeyAuth: []
paths:
  /qr/:
    get:
      summary: List QR codes
      operationId: listManagedQrCodes
      responses:
        '200':
          description: List of QR codes
components:
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        Send your Management API key as the raw value of the Authorization
        header — no "Bearer " or "Token " prefix, and no other characters.
        Example: `Authorization: 401f7ac837da42b97f613d789819ff93537bee6a`. A
        header containing more than one space-separated part is rejected
        outright. Requests also require the request's Host header to be the
        management API host (e.g. management.scanova.io) — the same key sent to
        the regular API host will not authenticate.

````