Back to Browse

Theqrcode MCP Server

Developer ToolsModerate5.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Generate QR codes for URLs, WiFi, contacts and text. Paid API key adds saved codes + analytics.

About

Generate QR codes for URLs, WiFi, contacts and text. Paid API key adds saved codes + analytics.

Remote endpoints: streamable-http: https://mcp.theqrcode.io/mcp

Security Report

5.2
Moderate5.2Moderate Risk

Well-architected MCP server with strong authentication controls and proper input validation. API keys are correctly extracted from Authorization headers and never logged or exposed. The server properly enforces authentication checks at tool execution time while advertising tools to all sessions for directory crawler compatibility. Minor code quality observations around error handling breadth do not materially impact security. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity).

4 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

TheQRCode.io MCP Server

Listed on mcpservers.org

Generate QR codes — and read their scan analytics — from Claude, Cursor, or any MCP client.

Remote HTTP server. Nothing to install. No npm, no Docker, no Python. Point your client at one URL and ask.

https://mcp.theqrcode.io/mcp

Listed in the official MCP Registry as io.theqrcode/qr-code-generator.


Setup

Claude Desktop

Settings → Developer → Edit Config:

{
  "mcpServers": {
    "theqrcode": {
      "url": "https://mcp.theqrcode.io/mcp"
    }
  }
}

Cursor

~/.cursor/mcp.json:

{
  "mcpServers": {
    "theqrcode": {
      "url": "https://mcp.theqrcode.io/mcp"
    }
  }
}

With an API key (unlocks the analytics tools)

{
  "mcpServers": {
    "theqrcode": {
      "url": "https://mcp.theqrcode.io/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Any client supporting the MCP spec over streamable HTTP works. Restart the client after editing config, then just ask: "Generate a QR code for https://example.com".


Tools

Three tools. All three are advertised to every session — including anonymous ones, so directory crawlers see the real surface — but the two account tools refuse at call time without a key.

generate_qr_code — free, no key

ParamTypeRequiredNotes
typeurl | wifi | contact | text | emailyesemail requires a key
contentstringyesthe data to encode
namestringnodisplay name when saving to an account
sizeint 64–1024nodefault 256
darkColor#RRGGBBnodefault #000000
lightColor#RRGGBBnodefault #FFFFFF

Returns a hosted PNG URL plus a base64 data URL for inline display.

Anonymous → the public keyless API, 100 requests/hour per IP. The hosted link is a 24-hour preview; download the image rather than bookmarking the URL. The QR code itself never expires — it is the preview hosting that is temporary.

Authenticated → the v1 API. The code is saved to your account permanently, rate limited by key rather than IP, and email becomes available.

list_qr_codes — Developer plan

Lists codes saved to your account. page, limit (1–100), type filter.

get_analytics — Developer plan

Scan analytics, account-wide or for one qrCodeId. timeRange: 1h, 1d, 7d, 30d (default), 90d, 1y.

Returns total and unique scans, time, approximate location (country/city derived from IP — regional, not GPS), device and OS, and campaign. Static QR codes cannot be tracked; analytics require a dynamic code.


Plans

AnonymousDeveloper ($19/mo)
generate_qr_code✅ url, wifi, contact, text✅ + email
Codes saved to account❌ 24h preview link✅ permanent
list_qr_codes
get_analytics
Rate limit100/hr per IP5,000/hr per key

API keys: https://theqrcode.io/pricing


Running it yourself

The hosted server at mcp.theqrcode.io is the supported path — you do not need to run this. But it is a plain Express app if you want to:

npm install
npm run build
npm start          # or: npm run dev
npm test
EnvDefaultPurpose
QR_API_BASEhttps://theqrcode.ioREST API this server wraps
PORT3001listen port

Routes: POST|GET|DELETE /mcp (stateless — a fresh server and transport per request), GET /health.

Docker:

docker build -t theqrcode-mcp .
docker run -p 3001:3000 -e PORT=3000 theqrcode-mcp

What it wraps

TheQRCode.io is a QR code generation and analytics platform: static and dynamic QR codes for URLs, WiFi, vCard contacts and text, with scan analytics by time, device and approximate location. Static codes never expire, and printed codes are never switched off to force an upgrade.

This server is one of three ways in — the others are a keyless REST API and OpenAI function calling.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!