Qrblox MCP Server

Qrblox MCP

The Model Context Protocol server for Qrblox — let any MCP-aware AI agent generate and manage QR codes, audio codes, menus, and loyalty campaigns.

📚 Full reference: docs.qrblox.com/mcp.html 🌐 Endpoint: https://app.qrblox.com/api/mcp 🔑 Mint a key: create.qrblox.com/settings/api-keys 🟢 No-key sandbox: POST https://app.qrblox.com/api/generate-qr-code

This is a public, README-only repo. The MCP server itself is deployed at the endpoint above; the canonical docs live at docs.qrblox.com/mcp.html.

---

What is it?

qrblox-mcp is a JSON-RPC 2.0 MCP server. Point Claude Desktop, Cursor, Codex, or any MCP client at https://app.qrblox.com/api/mcp, paste in a sk-qrblox- key, and the assistant can immediately draft QR codes (and audio codes, menus, and loyalty campaigns) and read scan analytics on a merchant workspace.

Every code created via the MCP lives on the caller's Qrblox account alongside codes made from the iOS, Android, Canva, and web surfaces.

---

Quick start

1. Try it free (no signup, no OAuth)

curl -X POST https://app.qrblox.com/api/generate-qr-code \
  -H 'content-type: application/json' \
  -d '{"url":"https://example.com"}'

Returns:

{
  "ok": true,
  "code": {
    "codeId": "…",
    "destinationUrl": "https://example.com",
    "qrImage":    "data:image/png;base64,…",            // inline PNG
    "qrImageUrl": "https://storage.googleapis.com/…",    // hosted PNG
    "claimToken": "…",
    "expiresAt":  "…"
  },
  "upgrade": { "signup": "https://app.qrblox.com", "apiKeys": "https://create.qrblox.com/settings/api-keys" }
}

Sandbox limits: 3 codes / IP / day, codes expire in 7 days.

2. Mint an API key

Sign in to create.qrblox.com → Settings → API keys → New API key. Keys are sk-qrblox-<64 hex chars>, shown once, and revocable anytime.

3. Connect Claude Desktop

// ~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "qrblox": {
      "url": "https://app.qrblox.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-qrblox-..."
      }
    }
  }
}

Restart Claude Desktop. Then ask: "Generate a QR code for https://my-spring-menu.com."

4. Or Cursor / Codex / curl

Same URL, same Authorization header.

# tools/list — no auth required
curl -X POST https://app.qrblox.com/api/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

# tools/call — create a code on your account
curl -X POST https://app.qrblox.com/api/mcp \
  -H 'authorization: Bearer sk-qrblox-...' \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
       "params":{"name":"qrblox.qr.create",
                 "arguments":{"title":"Spring menu",
                              "destinationUrl":"https://qrblox.com/menu/spring"}}}'

---

Tools

All tools are merchant-scoped and draft-first — agents propose, the merchant approves before publishing.

Plus two REST endpoints for non-MCP callers:

---

Discovery

Full reference and connect snippets at docs.qrblox.com/mcp.html.

---

Errors

---

Security model

• Merchant-scoped — every API key is tied to one merchant workspace and one owner uid; tools can't reach another merchant's data.
• Hashed keys — plaintext shown once; Firestore stores only a SHA-256 hash and a short prefix.
• Audited — every tool call writes an audit entry with the caller, tool name, and status. Arguments and results are not persisted.
• Draft-first — creation tools produce drafts; publishing, billing, and destructive changes stay with the merchant.

---

Related

• 🌐 qrblox.com — marketing site
• 🖥️ app.qrblox.com — web dashboard
• 📱 iOS · Android · Canva
• 📚 Full Qrblox docs
• 🐙 Terahertz-Inc/qrblox-com — Qrblox overview repo

---

License

© Qrblox / Terahertz Inc.