{"openapi":"3.1.0","info":{"title":"QRtracer API","version":"1.0.0","description":"REST API and MCP access. Private operations enforce ownership and website plan entitlements. MCP guide: https://qrtracer.io/qr-code-mcp"},"paths":{"/api/v1/qr-codes":{"post":{"summary":"Create a tracked QR code (anonymous or API key)","requestBody":{"content":{"application/json":{"schema":{"type":"object","required":["destination"],"properties":{"destination":{"type":"string"},"label":{"type":"string"}}}}}}}},"/api/v1/qr-codes/{id}":{"get":{"summary":"Analytics for a claimed code"},"patch":{"summary":"Update destination (Safe Browsing checked)"}},"/api/simulate-scan":{"post":{"summary":"Simulate a routing program"}},"/api/compile-routing":{"post":{"summary":"Compile English to routing JSON"}},"/mcp":{"post":{"summary":"QR code MCP tools","description":"Tools: create_qr, get_account, list_qr_codes, get_qr_code, update_destination, get_analytics, compare_qr_codes, render_qr, check_qr_link; legacy set_routing and simulate_scan. Public checking and limited anonymous creation; account actions require ownership and applicable website plan permissions. Account OAuth is in controlled rollout; supported Programmable API-key clients can use bearer authentication. Analytics are scan counts, not conversions. PNG and eligible SVG export. See https://qrtracer.io/qr-code-mcp."}}}}