Webhooks

Add an https URL under API → Webhooks and choose events: scans, codes created, changed or archived. We send a JSON POST within seconds.

Check the QRGlo-Signature header: t is the send time, v1 is an HMAC-SHA256 of "t.body" using your signing secret. Reject requests whose time is far from now.

A webhook that fails 5 times in a row is paused and you get a notification. Resume it once your endpoint is back.