> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanova.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Retrieve

> GET /qrcode/{qrid}/

Retrieves, updates, or deletes a single QR code on the **Management API** host (`management.scanova.io`), authenticated with your raw Management API key.

```
GET    https://management.scanova.io/qrcode/{qrid}/
PUT    https://management.scanova.io/qrcode/{qrid}/
PATCH  https://management.scanova.io/qrcode/{qrid}/
DELETE https://management.scanova.io/qrcode/{qrid}/
Authorization: 401f7ac837da42b97f613d789819ff93537bee6a
```

<ParamField path="qrid" type="string" required>
  The QR code's `qrid` (e.g. `QR7K9M2XN`) — the human-readable identifier returned by [`GET /qr/`](/api-reference/management-api/qr/list), not the numeric `id`.
</ParamField>

<Tip>
  This same view is also reachable at `/qr/{qrid}/` (i.e. under the same path prefix as the list/create endpoint) — both paths resolve to the identical view and behavior. This reference documents `/qrcode/{qrid}/` since that's the path verified for this doc set, but either works.
</Tip>

`GET` returns the full detail shape — every field the create/update serializer accepts, plus computed fields, but without AI-assistant fields (`ai_qr_code`, `ai_session_id`, `ai_chat_history`) and cross-database response-count fields that the list endpoint also omits.

<ResponseExample>
  ```json 200 OK theme={null}
  {
    "id": 88231,
    "qrid": "QR7K9M2XN",
    "name": "Product launch flyer",
    "qr_type": "dy",
    "qr_type_display": "Dynamic",
    "category": { "id": 1, "name": "Website URL", "slug": "url" },
    "info": "{\"type\":\"url\",\"data\":{\"url\":\"https://example.com\"}}",
    "pattern_info": null,
    "dynamic_url_object": {
      "url_hash": "a1b2c3",
      "complete_url": "https://qr.link/a1b2c3",
      "visit_count": 1042
    },
    "thumbnail": "https://cdn.scanova.io/thumbnails/QR7K9M2XN.png",
    "is_active": true,
    "folder": null,
    "created": "2026-06-02T14:03:11Z",
    "modified": "2026-08-10T08:41:02Z",
    "tags_list": ["campaign-2026", "print"],
    "is_password_protected": false,
    "published_at": "2026-06-02T14:05:00Z",
    "is_currently_draft": false
  }
  ```
</ResponseExample>

## Scope and errors

Every method here only operates on QR codes owned by the account the key belongs to — requesting a `qrid` you don't own (or that doesn't exist) returns `404`, not `403`, so you can't use this endpoint to probe for the existence of other accounts' QR codes.

## Related

* [Update](/api-reference/management-api/qr/update) — the other operation on this same endpoint.
* [Delete](/api-reference/management-api/qr/delete) — the other operation on this same endpoint.
* [List QR codes](/api-reference/management-api/qr/list) — find a `qrid` to retrieve here.
* [Create a QR code](/api-reference/management-api/qr/create) — creating a QR code returns this same full detail shape.
* [Download a QR code image](/api-reference/management-api/qr/download) — render this QR code as an image file.
* [List trashed QR codes](/api-reference/management-api/qr/trash) — where a QR code lands after `DELETE` here.


## OpenAPI

````yaml api-reference/openapi/management-api.json GET /qrcode/{qrid}/
openapi: 3.1.0
info:
  title: Scanova Management API (v2)
  description: >-
    The complete Scanova Management API — every endpoint available at
    management.scanova.io (QR codes, folders, tags, leads, forms, analytics,
    plans, shared users & roles), plus the token-creation and usage-stats
    endpoints used to authenticate against it. Every path and request/response
    shape below was verified live against a real API key and the actual running
    backend (Phase 7, 2026-08-16) — not guessed from reading urls.py alone.
  version: 2.0.0
servers:
  - url: https://management.scanova.io
    description: Management API — QR/folder/tag/lead/form/analytics/plans endpoints
security:
  - apiKeyAuth: []
paths:
  /qrcode/{qrid}/:
    get:
      summary: Retrieve a QR code
      operationId: getManagedQrCode
      parameters:
        - name: qrid
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: QR code detail
components:
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: Authorization
      description: >-
        Send your Management API key as the raw value of the Authorization
        header — no "Bearer " or "Token " prefix, and no other characters.
        Example: `Authorization: 401f7ac837da42b97f613d789819ff93537bee6a`. A
        header containing more than one space-separated part is rejected
        outright. Requests also require the request's Host header to be the
        management API host (e.g. management.scanova.io) — the same key sent to
        the regular API host will not authenticate.

````