The QR code for your invoices, in one call.

Make a code

A POST with the content in the body. The content never goes in the address, so it is not left in the logs of servers along the way.

curl https://api.qrsensei.com/v1/qr \
  -H "Authorization: Bearer $QRSENSEI_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "content": {
    "type": "text",
    "text": "FT 2026/118 · 149,90 EUR"
  },
  "brand": "qrsensei",
  "style": {
    "color": {
      "kind": "solid",
      "color": "#18181B"
    }
  },
  "format": "png",
  "size": 256
}'

Request body

Answer

{
  "image": "data:image/png;base64,iVBORw0KGgo…",
  "format": "png",
  "remaining": 902,
  "limit": 1000,
  "resetsAt": "2026-12-01T00:00:00.000Z"
}

The same numbers come in the X-QrSensei-Remaining, X-QrSensei-Limit and X-QrSensei-Reset headers.

Authentication

Each call carries your application's key in the Authorization: Bearer qs_live_… header.

• The key is shown once, when it is made. We keep only a fingerprint of it: if it is lost, make a new one in your profile and the old one stops working.
• Call from your server, never from a browser or an app: a key in front-end code can be read by anyone.
• Nothing of the codes is kept: neither the content nor the images. Only a count per month.

Contents

The same types as the editor, with the same rules. This table is read from the rules that check every call: it cannot go out of date.

A Wi-Fi without a password takes encryption "nopass". A field left out takes its empty value; a missing required field is named in the error's detail.

Styles

Designed in your profile, with the code live beside it. Each has an id and one is your default; or write the style in the call itself, as style.

{}

{ "color": { "kind": "solid", "color": "#18181B" }, "background": { "kind": "transparent" }, "quietZone": 2 }

{ "dots": "dots", "finders": "drop", "color": { "kind": "gradient", "type": "linear", "angle": 45, "stops": [ "#0F172A", "#1E40AF" ] }, "background": { "kind": "solid", "color": "#FFF7ED" } }

A style is accepted only if it reads: shapes that go together, and ink darker than its paper with a contrast of at least 4.5:1. A transparent code is checked against white, an invoice's paper.

Brands

"auto" recognises the brand from the link (an Instagram link takes Instagram's logo). A name fixes the brand; "none" leaves the middle clear. The list also comes from GET /v1/brands.

Against phishing: on a link, a fixed brand is used only if the link is that brand's own. A bank's logo never lands on a fake link.

• qrsensei
• instagram
• facebook
• linkedin
• x
• tiktok
• youtube
• github
• spotify
• whatsapp
• telegram
• signal
• viber
• snapchat
• pinterest
• threads
• discord
• reddit
• messenger
• googleMaps
• appleMaps
• waze
• paypal
• revolut
• wise
• stripe

Limits

Errors

Always an error object with code, message and, where it helps, detail: the code is for your program, the message for whoever reads it. A call with an error is not counted.