Skip to main content
POST
Permanently removes QR Codes that are already in Trash.
array
required
qrid values to delete permanently, or the single-element sentinel ["all"].
This is irreversible. It is a hard delete: the rows leave the database and no restore is possible. It only ever operates on QR Codes that are already soft-deleted — it is not a shortcut past Trash for a live QR Code.
The GS1 referential-integrity guard applies here too: a QR Code that is a GS1 resolution target, or a GS1 parent with child variants, is refused with 400. Related suspicious-QR records are hard-deleted alongside the QR Code, in the same transaction.

Authorizations

Authorization
string
header
required

Send your Management API key as the raw value of the Authorization header — no "Bearer " or "Token " prefix, and no other characters. Example: Authorization: 401f7ac837da42b97f613d789819ff93537bee6a. A header containing more than one space-separated part is rejected outright. Requests also require the request's Host header to be the management API host (e.g. api.scanova.io) — the same key sent to the regular API host will not authenticate.

Response

QR codes permanently deleted.