Qrblox

Qrblox MCP

The Model Context Protocol server for [Qrblox](https://qrblox.com) — let any MCP-aware AI agent generate and manage QR codes, audio codes, menus, and loyalty campaigns.

📚 Full reference: docs.qrblox.com/mcp.html 🌐 Endpoint: https://app.qrblox.com/api/mcp 🔑 Mint a key: create.qrblox.com/settings/api-keys 🟢 No-key sandbox: POST https://app.qrblox.com/api/generate-qr-code

This is a public, README-only repo. The MCP server itself is

deployed at the endpoint above; the canonical docs live at

docs.qrblox.com/mcp.html.

What is it?

qrblox-mcp is a JSON-RPC 2.0 MCP server. Point Claude Desktop, Cursor, Codex, or any MCP client at https://app.qrblox.com/api/mcp, paste in a sk-qrblox- key, and the assistant can immediately draft QR codes (and audio codes, menus, and loyalty campaigns) and read scan analytics on a merchant workspace.

Every code created via the MCP lives on the caller's Qrblox account alongside codes made from the iOS, Android, Canva, and web surfaces.

Quick start

1. Try it free (no signup, no OAuth)

curl -X POST https://app.qrblox.com/api/generate-qr-code \

-H 'content-type: application/json' \ -d '{"url":"https://example.com"}'

Returns:

{

"ok": true, "code": { "codeId": "…", "destinationUrl": "https://example.com", "qrImage": "data:image/png;base64,…", // inline PNG "qrImageUrl": "https://storage.googleapis.com/…", // hosted PNG "claimToken": "…", "expiresAt": "…" }, "upgrade": { "signup": "https://app.qrblox.com", "apiKeys": "https://create.qrblox.com/settings/api-keys" } }

Sandbox limits: 3 codes / IP / day, codes expire in 7 days.

2. Mint an API key

Sign in to create.qrblox.com → Settings → API keys → New API key. Keys are sk-qrblox-<64 hex chars>, shown once, and revocable anytime.

3. Connect Claude Desktop

// ~/Library/Application Support/Claude/claude_desktop_config.json

{ "mcpServers": { "qrblox": { "url": "https://app.qrblox.com/api/mcp", "headers": { "Authorization": "Bearer sk-qrblox-..." } } } }

Restart Claude Desktop. Then ask: *"Generate a QR code for https://my-spring-menu.com."*

4. Or Cursor / Codex / curl

Same URL, same Authorization header.

# tools/list — no auth required

curl -X POST https://app.qrblox.com/api/mcp \ -H 'content-type: application/json' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

tools/call — create a code on your account

curl -X POST https://app.qrblox.com/api/mcp \ -H 'authorization: Bearer sk-qrblox-...' \ -H 'content-type: application/json' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call", "params":{"name":"qrblox.qr.create", "arguments":{"title":"Spring menu", "destinationUrl":"https://qrblox.com/menu/spring"}}}'

Tools

All tools are merchant-scoped and draft-first — agents propose, the merchant approves before publishing.

Plus two REST endpoints for non-MCP callers:

Discovery

Full reference and connect snippets at docs.qrblox.com/mcp.html.

Errors

Security model

• Merchant-scoped — every API key is tied to one merchant workspace and one owner uid; tools can't reach another merchant's data.
• Hashed keys — plaintext shown once; Firestore stores only a SHA-256 hash and a short prefix.
• Audited — every tool call writes an audit entry with the caller, tool name, and status. Arguments and results are not persisted.
• Draft-first — creation tools produce drafts; publishing, billing, and destructive changes stay with the merchant.

Related

• 🌐 qrblox.com — marketing site
• 🖥️ app.qrblox.com — web dashboard
• 📱 iOS · Android · Canva
• 📚 Full Qrblox docs
• 🐙 Terahertz-Inc/qrblox-com — Qrblox overview repo

License

© Qrblox / Terahertz Inc.