API
The API drives the same engine, from your own code
Create, edit and read dynamic codes from your own systems. It is the same redirect and analytics engine as the console, so codes created through the API never brick and their analytics never expire — you just drive it with code instead of by hand.
What can the API do?
It exposes the core actions programmatically: create a dynamic code, edit where an existing code points, read a code’s scan data, and bulk-create serialized codes. The control API is the same one behind the console, so you can wire code generation into a checkout, a CMS or a print pipeline and pull scan data into your own reporting — and every code you make keeps resolving and keeps its history, with no expiry.
How do I authenticate?
Server-to-server calls use a tenant-scoped API key, sent as anAuthorization: Bearer qrd_… header. The secret is shown once when you create the key and stored only as a hash, so it cannot be read back afterwards — copy it into your secret store at creation. Keys are revocable: if one is exposed, revoke it and issue a new one, and the old key stops working. API keys are available on the paid plans.
Can my systems react to events?
Yes. Subscribe an endpoint to code events with outbound webhooks and redireo pushes each event to you instead of making you poll. Every payload is signed with HMAC-SHA256, so you can verify it came from redireo and was not tampered with before you act on it. Webhook target URLs are validated to block internal and private-network addresses, so a subscription cannot be aimed at internal infrastructure (SSRF). Webhooks are on the paid plans, alongside the API.
How does bulk creation work?
You can create up to 500 serialized codes in one request. This is aimed at variable-data printing, where every item in a run — each package, ticket or asset — needs its own unique code. Instead of 500 separate calls, you request a block and get back 500 distinct codes ready to place.
Which plans include the API?
The paid plans. Pro is $39/mo, or $23.40/mo billed annually; Business is $149/mo. Both include API keys, webhooks and bulk create. The Free plan does not include API access. Change a code’s destination or rules from the API and the next scan follows the new rule, with no reprint.
API questions
What can the redireo API do?
It drives the same redirect and analytics engine as the console, so the codes you create from it never brick and their scan data never expires. You can create a dynamic code, edit where an existing code points, read its scan data, and bulk-create serialized codes — anything you would do by hand, driven from your own systems instead.
How do I authenticate to the API?
With a tenant-scoped API key, sent as an Authorization: Bearer qrd_… header on each request. The secret is shown once when you create the key and stored only as a hash, so it cannot be read back later; if a key is exposed you revoke it and issue a new one. Keys are for server-to-server use and are available on the paid plans.
Can my systems react to code events?
Yes. You subscribe an endpoint to code events with outbound webhooks, and redireo pushes each event to you rather than making you poll. Every payload is signed with HMAC-SHA256 so you can verify it came from redireo and was not altered, and webhook target URLs are validated to block internal and private-network addresses, so a webhook cannot be pointed at internal infrastructure. Webhooks are on the paid plans.
How many codes can I bulk-create in one request?
Up to 500 serialized codes per request. That is built for variable-data print runs, where each item on a batch needs its own unique code, so you generate them in blocks instead of one call at a time.
Which plans include API access?
The API, webhooks and bulk create are on the paid plans — Pro at $39/mo, or $23.40/mo billed annually, and Business at $149/mo. The Free plan does not include API access.