OpenQR
by openqr.uk · remote · local (npm) · no sign-in to list tools · v1.0.4 · published by uk.openqr
Generate, edit and track dynamic (editable) QR codes with scan analytics. Hosted MCP and REST API.
23 tools: 3 can delete or cancel things, 13 change things and 7 only read.
Scanned Oct 21, 2026
- Deletes or cancels3Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things13Claude Code: ask: see these tools
- Only reads7Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http qr https://openqr.uk/mcp --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
23 tools
Deletes or cancels 3Claude Code: deny
delete_dynamic_qrPermanently delete a dynamic QR code.No findings
Why it is in this group
- The name "delete_dynamic_qr" says "delete": a word for removing or ending something.
- The description says "Permanently delete".
Description, as the server wrote it Permanently delete a dynamic QR code. The short link stops working. Requires an OpenQR API key.
delete_folderDelete a folder (its codes are un-filed, not deleted).No findings
Why it is in this group
- The name "delete_folder" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete a folder (its codes are un-filed, not deleted). Requires an OpenQR API key.
delete_themeDelete a saved theme.No findings
Why it is in this group
- The name "delete_theme" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete a saved theme. Codes already styled with it keep their look. Requires an OpenQR API key.
Changes things 13Claude Code: ask
bulk_create_dynamic_qrCreate up to 200 dynamic QR codes at once.No findings
Why it is in this group
- The name "bulk_create_dynamic_qr" says "create": a word for a change.
Description, as the server wrote it Create up to 200 dynamic QR codes at once. Requires an OpenQR API key.
clear_subdomainRelease the branded subdomain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Release the branded subdomain. Codes stay live on the plain short link; only the {name}.oqr.to form stops resolving. The name becomes claimable by someone else. Requires an OpenQR API key.
create_dynamic_qrCreate an editable (dynamic) QR code whose destination you can change later without reprinting.No findings
Why it is in this group
- The name "create_dynamic_qr" says "create": a word for a change.
Description, as the server wrote it Create an editable (dynamic) QR code whose destination you can change later without reprinting. Requires an OpenQR API key.
create_folderCreate a folder to organise codes.No findings
Why it is in this group
- The name "create_folder" says "create": a word for a change.
Description, as the server wrote it Create a folder to organise codes. Requires an OpenQR API key.
create_link_aliasCreate an extra short link (link alias) that resolves where one of your dynamic codes points: share a different slug per channel while the QR keeps its own slug, so QR scans and li…No findings
Why it is in this group
- The name "create_link_alias" says "create": a word for a change.
Description, as the server wrote it Create an extra short link (link alias) that resolves where one of your dynamic codes points: share a different slug per channel while the QR keeps its own slug, so QR scans and link clicks are counted separately. Free accounts have no alias allowance; Pro includes 10. Requires an OpenQR API key.
create_static_qrSave a static QR code to your library from structured fields: wifi, contact (vCard), email, SMS, WhatsApp, location, text, phone or URL.No findings
Why it is in this group
- The name "create_static_qr" says "create": a word for a change.
Description, as the server wrote it Save a static QR code to your library from structured fields: wifi, contact (vCard), email, SMS, WhatsApp, location, text, phone or URL. Static codes bake the content into the code itself — no short link, no scan analytics, not editable later. Render the returned payload with generate_qr. Requires an OpenQR API key.
create_themeSave a reusable style theme.No findings
Why it is in this group
- The name "create_theme" says "create": a word for a change.
Description, as the server wrote it Save a reusable style theme. `style` is a QR style object (fgColor, bgColor, dotType, cornerSquareType, etc.). Requires an OpenQR API key.
generate_epc_codeBuild a static EPC/SEPA payment payload (EPC069-12, the GiroCode/BezahlCode European banks scan) and optionally render it as a QR image.No findings
Why it is in this group
- The name "generate_epc_code" says "generate": a word for a change.
Description, as the server wrote it Build a static EPC/SEPA payment payload (EPC069-12, the GiroCode/BezahlCode European banks scan) and optionally render it as a QR image. Returns the payload string by default. Static and untracked — nothing is saved to the library. Requires an OpenQR API key.
generate_pix_codeBuild a static PIX (BR Code) payment payload for Brazil and optionally render it as a QR image.No findings
Why it is in this group
- The name "generate_pix_code" says "generate": a word for a change.
Description, as the server wrote it Build a static PIX (BR Code) payment payload for Brazil and optionally render it as a QR image. Returns the payload string by default (render it with generate_qr, or pass format). Static and untracked — nothing is saved to the library. Requires an OpenQR API key.
generate_qrGenerate a static QR code from any text/URL.No findings
Why it is in this group
- The name "generate_qr" says "generate": a word for a change.
Description, as the server wrote it Generate a static QR code from any text/URL. Returns a PNG image (or SVG markup). Requires an OpenQR API key.
generate_upi_codeBuild a static UPI (upi://pay) payment payload for India and optionally render it as a QR image.No findings
Why it is in this group
- The name "generate_upi_code" says "generate": a word for a change.
Description, as the server wrote it Build a static UPI (upi://pay) payment payload for India and optionally render it as a QR image. Returns the payload string by default. Static and untracked — nothing is saved to the library. Requires an OpenQR API key.
set_subdomainClaim or change the branded subdomain so codes also resolve at {name}.oqr.to.No findings
Why it is in this group
- The name "set_subdomain" says "set": a word for a change.
Description, as the server wrote it Claim or change the branded subdomain so codes also resolve at {name}.oqr.to. Pro only. Codes keep working on the plain short link either way, so changing this never breaks anything already printed. Requires an OpenQR API key.
update_dynamic_qrEdit a dynamic QR code: change its destination, label, custom short link (slug), tags or folder.No findings
Why it is in this group
- The name "update_dynamic_qr" says "update": a word for a change.
Description, as the server wrote it Edit a dynamic QR code: change its destination, label, custom short link (slug), tags or folder. Pass only the fields you want to change. Requires an OpenQR API key.
Only reads 7Claude Code: allow
get_dynamic_qrGet the full details of one of your QR codes by id: destination, short link, label, type, tags, folder, status and created date.No findings
Why it is in this group
- The name "get_dynamic_qr" says "get": a word for reading.
Description, as the server wrote it Get the full details of one of your QR codes by id: destination, short link, label, type, tags, folder, status and created date. Requires an OpenQR API key.
get_scansGet scan statistics for a dynamic QR code.No findings
Why it is in this group
- The name "get_scans" says "get": a word for reading.
Description, as the server wrote it Get scan statistics for a dynamic QR code. Requires an OpenQR API key.
get_subdomainShow the branded subdomain on this account ({name}.oqr.to).No findings
Why it is in this group
- The name "get_subdomain" says "get": a word for reading.
Description, as the server wrote it Show the branded subdomain on this account ({name}.oqr.to). Reports whether it is currently suspended — a suspended subdomain redirects to the plain short link instead of serving, which happens when a Pro plan lapses. Requires an OpenQR API key.
list_dynamic_qrList your dynamic (editable) QR codes — id, short URL, destination, label and status.No findings
Why it is in this group
- The name "list_dynamic_qr" says "list": a word for reading.
Description, as the server wrote it List your dynamic (editable) QR codes — id, short URL, destination, label and status. Requires an OpenQR API key.
list_foldersList your folders (id and name).No findings
Why it is in this group
- The name "list_folders" says "list": a word for reading.
Description, as the server wrote it List your folders (id and name). Requires an OpenQR API key.
list_link_aliasesList the link aliases of one dynamic code.No findings
Why it is in this group
- The name "list_link_aliases" says "list": a word for reading.
Description, as the server wrote it List the link aliases of one dynamic code. Requires an OpenQR API key.
list_themesList your saved style themes (id, name) — apply one by passing its id or name as `theme` to generate/create/update tools.No findings
Why it is in this group
- The name "list_themes" says "list": a word for reading.
Description, as the server wrote it List your saved style themes (id, name) — apply one by passing its id or name as `theme` to generate/create/update tools. Requires an OpenQR API key.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.4. Values in angle brackets are yours to fill in.
claude mcp add --transport http qr https://openqr.uk/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__qr__get_dynamic_qr",
"mcp__qr__get_scans",
"mcp__qr__list_link_aliases",
"mcp__qr__list_dynamic_qr",
"mcp__qr__list_folders",
"mcp__qr__list_themes",
"mcp__qr__get_subdomain"
],
"ask": [
"mcp__qr__generate_qr",
"mcp__qr__generate_pix_code",
"mcp__qr__generate_epc_code",
"mcp__qr__generate_upi_code",
"mcp__qr__create_dynamic_qr",
"mcp__qr__create_static_qr",
"mcp__qr__update_dynamic_qr",
"mcp__qr__create_link_alias",
"mcp__qr__bulk_create_dynamic_qr",
"mcp__qr__create_folder",
"mcp__qr__create_theme",
"mcp__qr__set_subdomain",
"mcp__qr__clear_subdomain"
],
"deny": [
"mcp__qr__delete_dynamic_qr",
"mcp__qr__delete_folder",
"mcp__qr__delete_theme"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as qr. Review it before you use it.