Authorization: Bearer qrbd_3aFk9mZpQxL2nVrTwJsY8bCeKdHoN1gI

HTTP/1.1 429 Too Many Requests
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1716912060000

{ "error": "rate_limited" }

{
  "data": [
    {
      "id": "a1b2c3d4-...",
      "name": "Production Key",
      "key_prefix": "qrbd_3aFk9m",
      "created_at": "2026-01-15T10:00:00Z",
      "last_used_at": "2026-05-24T18:42:00Z"
    }
  ]
}

// Request
{ "name": "Production Key" }

// Response 201
{
  "data": {
    "id": "a1b2c3d4-...",
    "name": "Production Key",
    "key_prefix": "qrbd_3aFk9m",
    "created_at": "2026-05-25T12:00:00Z",
    "key": "qrbd_3aFk9mZpQxL2nVrTwJsY8bCeKdHoN1gI"
  }
}

{ "data": { "id": "a1b2c3d4-...", "revoked": true } }

{
  "data": [
    {
      "id": "d4e5f6a7-...",
      "slug": "summer26",
      "domain": "r.qrs.bd",
      "short_url": "https://r.qrs.bd/summer26",
      "target_url": "https://example.com",
      "title": "Summer Campaign",
      "is_active": true,
      "is_dynamic": true,
      "type": "qr",
      "template_type": "url",
      "content": null,
      "smart_rules": [],
      "expires_at": null,
      "created_at": "2026-01-01T00:00:00Z",
      "updated_at": "2026-01-01T00:00:00Z"
    }
  ]
}

// Request
{
  "target_url": "https://your-destination.com",
  "title": "Summer Campaign",
  "slug": "summer26",
  "is_dynamic": true,
  "expires_at": "2026-12-31T23:59:59Z"
}

// Response 201
{
  "data": {
    "id": "d4e5f6a7-...",
    "slug": "summer26",
    "short_url": "https://r.qrs.bd/summer26",
    "target_url": "https://your-destination.com",
    "is_active": true,
    "is_dynamic": true,
    "type": "qr",
    "template_type": "url",
    "smart_rules": [],
    "expires_at": "2026-12-31T23:59:59Z",
    "created_at": "2026-05-25T12:00:00Z",
    "updated_at": "2026-05-25T12:00:00Z"
  }
}

// Request — change destination and pause the QR
{ "target_url": "https://new-destination.com", "is_active": false }

// Response 200 — full updated object

{ "data": { "id": "d4e5f6a7-...", "deleted": true } }

// Request
{
  "target_url": "https://example.com/long/url?utm_source=campaign",
  "title": "Campaign Link",
  "slug": "campaign-q1"
}

// Response 201
{
  "data": {
    "id": "b2c3d4e5-...",
    "slug": "campaign-q1",
    "short_url": "https://r.qrs.bd/campaign-q1",
    "target_url": "https://example.com/long/url?utm_source=campaign",
    "is_active": true,
    "type": "link",
    "created_at": "2026-05-25T12:00:00Z"
  }
}

{ "target_url": "https://new-destination.com", "is_active": false }

{ "data": { "id": "b2c3d4e5-...", "deleted": true } }

{
  "data": [
    {
      "id": "c3d4e5f6-...",
      "domain": "links.yourbrand.com",
      "status": "pending",
      "ssl_status": "pending",
      "verification": {
        "cname_target": "cname.qrs.bd",
        "ownership": {
          "type": "TXT",
          "name": "_cf-custom-hostname.links.yourbrand.com",
          "value": "abc123def456..."
        },
        "ssl": [
          { "type": "TXT", "name": "_acme-challenge.links.yourbrand.com", "value": "xyz789..." }
        ]
      },
      "created_at": "2026-05-25T12:00:00Z",
      "verified_at": null
    }
  ]
}

{ "data": { "id": "c3d4e5f6-..." } }

Geo — Route by Country

Match or exclude a list of ISO 3166-1 alpha-2 country codes.

{
  "type": "geo",
  "condition": "in",
  "values": ["US", "CA", "GB"],
  "target_url": "https://en.example.com"
}

// condition: "in" | "not_in"
// values: 2-letter country codes, e.g. ["US", "CA", "BD"]

OS — Route by Device

Match or exclude by operating system detected from the User-Agent.

{
  "type": "os",
  "condition": "is",
  "values": ["iOS", "Android"],
  "target_url": "https://m.example.com"
}

// condition: "is" | "is_not"
// values: "iOS" | "Android" | "Windows" | "Mac" | "Linux"

A/B — Split Traffic

Send a percentage of visitors to a variant URL. Visitors not captured fall through to the next rule or default.

{
  "type": "ab",
  "weight": 20,
  "target_url": "https://new.example.com"
}

// weight: 1–99 (percent of traffic)

Time — Route by Time of Day

Match a time window and days of week in any IANA timezone. Wrap-midnight windows are supported.

{
  "type": "time",
  "timezone": "America/New_York",
  "startTime": "09:00",
  "endTime": "17:00",
  "activeDays": [1, 2, 3, 4, 5],
  "target_url": "https://example.com/contact-us"
}

// activeDays: 0=Sun 1=Mon 2=Tue 3=Wed 4=Thu 5=Fri 6=Sat
// [] means every day

{
  "target_url": "https://default.example.com",
  "smart_rules": [
    { "type": "geo", "condition": "in", "values": ["US", "CA"], "target_url": "https://en.example.com" },
    { "type": "os",  "condition": "is", "values": ["iOS"],      "target_url": "https://apps.apple.com/..." },
    { "type": "ab",  "weight": 10,                              "target_url": "https://experiment.example.com" }
  ]
}

{ "error": "error_code", "message": "Human-readable detail (optional)" }

const API_KEY = process.env.QRSBD_API_KEY!;
const BASE = "https://qrs.bd/api/v1";

async function api(path: string, init?: RequestInit) {
  const res = await fetch(`${BASE}${path}`, {
    ...init,
    headers: {
      Authorization: `Bearer ${API_KEY}`,
      "Content-Type": "application/json",
      ...init?.headers,
    },
  });
  const body = await res.json();
  if (!res.ok) throw new Error(`${body.error}: ${body.message ?? ""}`);
  return body;
}

// Create a QR code
const { data: qr } = await api("/qrcodes", {
  method: "POST",
  body: JSON.stringify({
    target_url: "https://example.com",
    title: "My Campaign QR",
    is_dynamic: true,
  }),
});
console.log(`Scan URL: ${qr.short_url}`);

// Update destination
await api(`/qrcodes/${qr.id}`, {
  method: "PATCH",
  body: JSON.stringify({ target_url: "https://new-destination.com" }),
});

// Delete
await api(`/qrcodes/${qr.id}`, { method: "DELETE" });

const { data: qr } = await api("/qrcodes", {
  method: "POST",
  body: JSON.stringify({
    target_url: "https://default.example.com",
    title: "Multi-rule Campaign",
    is_dynamic: true,
    smart_rules: [
      // Route US/CA to English site
      { type: "geo", condition: "in",  values: ["US", "CA"], target_url: "https://en.example.com" },
      // iOS → App Store
      { type: "os",  condition: "is",  values: ["iOS"],      target_url: "https://apps.apple.com/app/id123" },
      // Android → Play Store
      { type: "os",  condition: "is",  values: ["Android"],  target_url: "https://play.google.com/..." },
      // A/B: 20% see new landing page
      { type: "ab",  weight: 20,                             target_url: "https://new.example.com" },
      // Business hours (Eastern Time)
      {
        type: "time",
        timezone: "America/New_York",
        startTime: "09:00",
        endTime: "17:00",
        activeDays: [1, 2, 3, 4, 5],
        target_url: "https://example.com/chat-now",
      },
    ],
  }),
});
console.log(qr.short_url); // https://r.qrs.bd/...

async function apiWithRetry(path: string, init?: RequestInit, retries = 3) {
  for (let i = 0; i < retries; i++) {
    const res = await fetch(`https://qrs.bd/api/v1${path}`, {
      ...init,
      headers: {
        Authorization: `Bearer ${process.env.QRSBD_API_KEY}`,
        "Content-Type": "application/json",
        ...init?.headers,
      },
    });

    if (res.status === 429) {
      const reset = Number(res.headers.get("X-RateLimit-Reset") ?? 0);
      const wait  = Math.max(reset - Date.now(), 1_000);
      console.log(`Rate limited — retrying in ${wait}ms`);
      await new Promise(r => setTimeout(r, wait));
      continue;
    }

    return res.json();
  }
  throw new Error("Max retries exceeded");
}