QrVerloz
by neoshrek · remote · no sign-in to list tools · v1.0.0 · published by GitHub user neoshrek
QR codes active 90 days, claimable forever. Request an API key in chat to retarget and track scans.
8 tools: 1 can delete or cancel things, 3 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http qrverloz https://qrverloz.com/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Deletes or cancels 1Claude Code: deny
delete_qr_codePermanently delete a QR code and its scan history.No findings
Why it is in this group
- The name "delete_qr_code" says "delete": a word for removing or ending something.
- The description says "Permanently delete".
Description, as the server wrote it Permanently delete a QR code and its scan history. This action cannot be undone. To prevent accidental or injected deletions, you MUST supply confirm_title — the exact title of the code as returned by get_qr_code or list_qr_codes. If the title does not match the stored record, the deletion is refused. Always call get_qr_code or list_qr_codes first to retrieve the exact title before calling this tool. Requires authentication.
Changes things 3Claude Code: ask
create_qr_codeCreate a new QR code.No findings
Why it is in this group
- The name "create_qr_code" says "create": a word for a change.
Description, as the server wrote it Create a new QR code. Authenticated users (API key required) get a permanent short URL that can be retargeted at any time without reprinting the physical QR image — limits are set by the account plan. Anonymous users receive a one-time data URI image that is not stored and cannot be updated. On success the result is a pre-formatted markdown table — display it exactly as received, do not reformat or summarise.
request_api_keyGet a free API token — no account or email required.No findings
Why it is in this group
- The name "request_api_key" says "request": a word for a change.
Description, as the server wrote it Get a free API token — no account or email required. The token gives you up to 5 QR codes that can be updated at any time. IMPORTANT LIFETIME WARNING: the token expires after 90 days, and QR codes are permanently deleted ~90 days after that (~180 days total). To keep codes alive permanently, claim a free account at https://qrverloz.com/claim — this must be done before the token expires. Save the returned token: it is shown only once. Add it to your MCP client config under Authorization: Bearer, then call create_qr_code.
update_qr_targetChange the destination URL of a QR code without touching the printed image.No findings
Why it is in this group
- The name "update_qr_target" says "update": a word for a change.
Description, as the server wrote it Change the destination URL of a QR code without touching the printed image. Print once, redirect anywhere — forever. Accepts either the internal qr_code_id or the short_code from the redirect URL. On success the result is a pre-formatted markdown table — display it exactly as received, do not reformat or summarise. Requires authentication.
Only reads 4Claude Code: allow
get_account_infoGet your account details: current plan, QR code usage, and which features are available.No findings
Why it is in this group
- The name "get_account_info" says "get": a word for reading.
Description, as the server wrote it Get your account details: current plan, QR code usage, and which features are available. Use this before create_qr_code to check remaining capacity, or to confirm which features are active on your plan. Requires authentication.
get_qr_codeLook up a single QR code by its internal ID or short code.No findings
Why it is in this group
- The name "get_qr_code" says "get": a word for reading.
Description, as the server wrote it Look up a single QR code by its internal ID or short code. Returns a pre-formatted markdown table with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link. Display the table exactly as received — do not reformat or summarise. Requires authentication.
get_qr_scansGet the total lifetime scan count for a QR code.No findings
Why it is in this group
- The name "get_qr_scans" says "get": a word for reading.
Description, as the server wrote it Get the total lifetime scan count for a QR code. Returns a pre-formatted markdown table with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link, Total Scans. Display the table exactly as received — do not reformat or summarise. Requires authentication.
list_qr_codesList all QR codes in your account.No findings
Why it is in this group
- The name "list_qr_codes" says "list": a word for reading.
Description, as the server wrote it List all QR codes in your account. Returns one pre-formatted markdown table per QR code with fields: Title, ID, Short Code, Short URL, Destination, Status, Created, QR Code Link. Display each table exactly as received — do not reformat or summarise. Requires authentication.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http qrverloz https://qrverloz.com/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__qrverloz__get_qr_code",
"mcp__qrverloz__list_qr_codes",
"mcp__qrverloz__get_qr_scans",
"mcp__qrverloz__get_account_info"
],
"ask": [
"mcp__qrverloz__create_qr_code",
"mcp__qrverloz__update_qr_target",
"mcp__qrverloz__request_api_key"
],
"deny": [
"mcp__qrverloz__delete_qr_code"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as qrverloz. Review it before you use it.
