Skip to main content
GET
List QR codes

Query Parameters

Usage Notes (query params)

  • ordering example: ?ordering=-dynamic_url_object__visit_count returns most-scanned QR codes first.
  • Date filters accept YYYY-MM-DD (server timezone aware). To filter by exact datetime, use server-side date range with created_from/created_till.
  • The qrid parameter accepts a single QR ID or multiple QR IDs as a comma-separated string (e.g., qrid=Q349...,Qf94...). Note: Use comma-separated values in a single parameter, not repeated query parameters. For example, use ?qrid=Q1,Q2,Q3 instead of ?qrid=Q1&qrid=Q2&qrid=Q3.
  • For scan_type=between, supply both scan_count1 and scan_count2 (e.g., scan_count1=10&scan_count2=100).
  • When filtering by tags, category, or qrid, URL-encode commas (or use repeated parameters depending on your client).

Examples

Get All QR Codes

Pagination

Sorting

Date Filtering

Category and Type Filtering

QR ID Filtering

Tag Filtering

User Filtering

Scan Count Filtering

Complex Filtering

Response Example

Performance & Pagination Best Practices

  • Use sensible page sizes on the client (server defaults to a safe page size). For large exports, use dedicated export endpoints if available.
  • Cache category metadata (it changes rarely) instead of refetching per-QR item.
  • Use server-side sorting (ordering) for accurate, paginated results rather than fetching all pages and sorting client-side.
  • Avoid deep paging with very large offsets; prefer cursor-based or export flows for millions of records.
  • Rate-limit handling: implement retries with exponential backoff for 429 Too Many Requests.

UI/UX Tips for Rendering

  • Show thumbnail if available; fall back to generated QR preview using qr_url.
  • Respect is_active and is_visible flags when listing to end users.
  • Use dynamic_url_object.visit_count and qr_type_display for quick insights.
  • For lists with many columns, provide column toggles — hide expensive fields (full info JSON) by default.

Authorizations

Authorization
string
header
required

Send your Management API key as the raw value of the Authorization header — no "Bearer " or "Token " prefix, and no other characters. Example: Authorization: 401f7ac837da42b97f613d789819ff93537bee6a. A header containing more than one space-separated part is rejected outright. Requests also require the request's Host header to be the management API host (e.g. management.scanova.io) — the same key sent to the regular API host will not authenticate.

Response

200

List of QR codes