The Resend of
QR Codes
Dynamic QR codes with scan analytics, webhooks, batch API, and EU Digital Product Passport for battery + textile — live EU compliance checks (AGEC/ESPR) before you save. Deploy on Cloudflare's global edge in seconds.
const qr = await qr3.codes.create({ content: "https://qr3.app/start", style: { dots: "rounded", color: "#F7901E" }, tracking: true, metadata: { campaign: "launch_26" } });
const qr = await qr3.codes.create({ content: "https://qr3.app/start", style: { dots: "rounded", color: "#F7901E" }, tracking: true, metadata: { campaign: "launch_26" } });
Everything you need to ship fast
From a simple URL QR to enterprise-grade Digital Product Passports — one API, one SDK, one CLI.
API-first
REST API with Zod validation, RFC 7807 errors, and OpenAPI docs. Rate-limited, versioned, and production-ready.
Learn more north_east qr_code_2Dynamic QR codes
Change the destination URL without reprinting. A/B testing, geo-redirect, and expiry built in.
Learn more north_east insightsScan analytics
Real-time scan tracking: country, city, device, OS, browser. Data stays on your infrastructure.
Learn more north_east verifiedEU Digital Product Passport
GS1 Digital Link resolver + DPP builder for battery and textile. Live validator for the EU battery regulation, French AGEC, and ESPR — errors visible before you save.
Learn more arrow_forward terminalCLI & SDKs
TypeScript, Python, and Go SDKs. CLI for scripting and CI/CD. MCP server for AI agents.
Learn more north_east shieldPrivacy-first
GDPR-compliant: IPs are SHA-256 hashed at the edge. Data export and erasure APIs included.
Learn more arrow_forwardSecure by default
QR phishing (“quishing”) is a growing attack vector. qr3.app protects your users on multiple layers — automatically, no configuration required.
URL scan on creation
Every URL is checked against the Google Web Risk API before activation. Malicious URLs are rejected.
ActiveContinuous rescanning
All active codes are re-checked every 24 hours. Compromised codes pause automatically.
ActiveReal-time validation API
POST /v1/scan/validate integrates into scanner apps or e-mail gateways. Enterprise plan.
Abuse reporting
Anyone can flag a suspicious code via POST /v1/report — temporary suspension is instant.
Redirect transparency
The redirect worker adds an X-QR3-Scan-Status: safe header to every response.
Cloudflare edge protection
WAF, DDoS mitigation and bot management across 300+ locations. <10 ms latency worldwide.
ActiveResponsible disclosure
Please report vulnerabilities to [email protected]. We follow a 90-day responsible disclosure policy.
AI-native from day one
qr3.app ships with a full MCP server. Your AI agents can create, update, and analyze QR codes without writing a single line of code.
Compatible with Claude, Cursor, and any MCP-capable agent.
{
"mcpServers": {
"qr3": {
"command": "npx",
"args": ["@qr3/mcp-server"],
"env": {
"QR3_API_KEY": "$QR3_KEY"
}
}
}
} Simple, transparent pricing
Start free. Scale when you're ready.
Free
For personal projects and prototypes.
- check Dynamic QR codes
- check SVG + PNG export
- check Basic analytics
- check API access
Pro
For professional developers and small teams.
- check Everything in Free
- check Webhooks
- check A/B destinations
- check PDF export
- check Batch API (100)
Business
For growing teams with advanced needs.
- check Everything in Pro
- check Batch API (1,000)
- check Organizations & Workspaces
- check Audit logs
- check Priority support
Agency
For agencies and enterprise deployments.
- check Everything in Business
- check Custom domains
- check Unlimited workspaces
- check SLA 99.9%
- check AI Power Pack included
Latest articles
Hands-on writing on DPP, QR codes and compliance — AI-researched, editorially reviewed.
The EU DPP Registry & the 2027 Battery Deadline: What to Prepare Now
Two regulatory clocks are ticking: the central EU Digital Product Passport registry is expected to come online in 2026 under ESPR, and the battery passport becomes mandatory on 18 February 2027. Lead times are long, so here is what to prepare now, with API code.
Automating Digital Product Passports with Webhooks
A Digital Product Passport is not a static page — every scan is an event you can build on. React to qr.scanned for analytics, re-orders and recall flags, keep passport data fresh from your ERP, and verify every payload with HMAC-SHA256. A developer-grade guide with code.
Free DPP Solutions, Honestly Compared (open-source vs SaaS)
Searching for a free Digital Product Passport solution? Open-source frameworks and EU pilot projects exist and the license can be zero, but the real cost is engineering and operations. An honest guide to open-source, pilots and hosted options, including where qr3 fits and where it does not.