---
title: "Short-lived QR image URL"
method: GET
path: "/v1/qr/{id}"
tags: ["Links"]
---

# Short-lived QR image URL

`GET /v1/qr/{id}`

## Request

- Base URL: `https://xn--s7y.xn--3ds443g`
- URL: `https://xn--s7y.xn--3ds443g/v1/qr/{id}`
- Auth: none required

Fetch a QR image using the short-lived signature from MCP create_qr. The signature binds the code, format, pixel size, expiry, and owner. It is not an API key, OAuth token, or session. Cookies and Authorization are ignored. A missing, tampered, or non-owner signature is 404. An expired signature is 410. Fetching this URL does not record a visit. Cache-Control is private, no-store. When signing is not configured, every request is 404. Returns the stored link's QR as PNG, or SVG when requested, with a short-lived image URL where available. The QR encodes qr_tracking_url. Where an image is not displayed, image_url (when present) or the short link reaches the same code.

## Path parameters

- `id` string, required

## Query parameters

- `exp` integer, required
- `fmt` 'png' | 'svg', required
- `px` 0 | 256 | 512 | 1024, required
- `sig` string, required

## Response `200`

QR image bytes. Not a visit.

## Other responses

- `404`: Missing, tampered, unsigned, inactive, or not the owner.
- `410`: Signature expired.

---

[API](https://skmtc.dev/xn--s7y/apis/agent-api.md) · [All operations](https://skmtc.dev/xn--s7y/apis/agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xn--s7y/apis/agent-api/revisions/d902f68518e9?raw)