> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanova.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Delete many QR Codes

> POST /qr/multi-delete/

Soft-deletes many QR Codes in one call. They move to Trash, exactly as with a single [Delete a QR Code](/api-reference/management-api/qr/delete).

```
POST   https://api.scanova.io/qr/multi-delete/
Authorization: 401f7ac837da42b97f613d789819ff93537bee6a
```

<ParamField body="ids" type="array" required>
  `qrid` values to delete, or the single-element sentinel `["all"]` to select everything the filter allows.
</ParamField>

<ParamField body="filter" type="object">
  A JSON object reusing the [List QR Codes](/api-reference/management-api/qr/list) filter set, to select QR Codes by criteria rather than by id.
</ParamField>

<ParamField body="search" type="object">
  A JSON search specification, applied alongside `filter`.
</ParamField>

<RequestExample>
  ```bash cURL theme={null}
  curl -X POST "https://api.scanova.io/qr/multi-delete/" \
    -H "Authorization: 401f7ac837da42b97f613d789819ff93537bee6a" \
    -H "Content-Type: application/json" \
    -d '{
        "ids": [
            "Qa1b2c3d4e5f6g7h8",
            "Qb2c3d4e5f6g7h8i9"
        ]
    }'
  ```
</RequestExample>

<Note>
  `filter` distinguishes an explicitly-null folder from an absent one:

  * `"filter": {"folder": null}` means **uncategorized QR Codes only**.
  * A `filter` with no `folder` key at all means **no folder restriction**.

  These are different selections. Send the key explicitly only when you mean "not in any folder".
</Note>

<Warning>
  The same GS1 referential-integrity guard as the single delete runs here: if any selected QR Code is a GS1 resolution target or a GS1 parent with child variants, the call is refused with `400` rather than deleting the rest.
</Warning>

## Related

* [Delete a QR Code](/api-reference/management-api/qr/delete) — the single-QR equivalent.
* [List QR Codes](/api-reference/management-api/qr/list) — the filter set `filter` reuses.
* [Restore trashed QR Codes](/api-reference/management-api/qr/trash-restore) — undo a bulk delete.
* [Permanently delete trashed QR Codes](/api-reference/management-api/qr/trash-delete) — make it irreversible.
* [QR Manager overview](/api-reference/management-api/qr/overview) — the quotas, role permissions, and Trash model shared by every endpoint in this module.
* [Management API overview](/api-reference/management-api/overview) — the auth scheme and quota rules that apply to this endpoint.


## OpenAPI

````yaml api-reference/openapi/management-api.json POST /qr/multi-delete/
openapi: 3.1.0
info:
  title: Scanova Management API (v2)
  description: >-
    The complete Scanova Management API — every endpoint available at
    api.scanova.io (QR codes, folders, tags, leads, forms, analytics, plans,
    shared users & roles), plus the token-creation and usage-stats endpoints
    used to authenticate against it. Every path and request/response shape below
    was verified live against a real API key and the actual running backend
    (Phase 7, 2026-08-16) — not guessed from reading urls.py alone.
  version: 2.0.0
servers:
  - url: https://api.scanova.io
    description: Management API — QR/folder/tag/lead/form/analytics/plans endpoints
security:
  - apiKeyAuth: []
paths:
  /qr/multi-delete/:
    post:
      summary: Soft-delete many QR codes
      description: >-
        Soft-deletes many QR codes at once — they move to Trash, exactly as with
        a single DELETE. Target them with an explicit `ids` list, the `["all"]`
        sentinel, or a `filter`/`search` pair reusing the list endpoint's filter
        set. The same GS1 referential-integrity guards apply and nothing is
        cascaded.
      operationId: deleteQrCodesMulti
      requestBody:
        content:
          application/json:
            example:
              ids:
                - Qa1b2c3d4e5f6g7h8
                - Qb2c3d4e5f6g7h8i9
      responses:
        '204':
          description: QR codes moved to Trash.
        '400':
          description: >-
            Nothing matched the selection, or the GS1 referential-integrity
            guard blocked the delete.
          content:
            application/json:
              example:
                ids:
                  - QR Codes does not exists
components:
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        Send your Management API key as the raw value of the Authorization
        header — no "Bearer " or "Token " prefix, and no other characters.
        Example: `Authorization: 401f7ac837da42b97f613d789819ff93537bee6a`. A
        header containing more than one space-separated part is rejected
        outright. Requests also require the request's Host header to be the
        management API host (e.g. api.scanova.io) — the same key sent to the
        regular API host will not authenticate.

````