Get started

1. Secure your account

Confirm your email, sign in, and enable an authenticator app from Security. API-key operations require MFA plus your current password.

2. Create a scoped key

Open Team & API, choose the minimum scopes required, set an expiry, then confirm with your password and current authenticator code. Copy the secret immediately; QRalto stores only a one-way hash.

3. Send a server-side request

curl --request GET \
  --url 'https://api.qralto.com/api/v1/qr-codes?page=1&pageSize=20' \
  --header 'Accept: application/json' \
  --header 'X-Api-Key: qra_REPLACE_WITH_YOUR_KEY'

Successful responses include:

X-Correlation-ID: 4f12739a3f9d4a2abf182e288c22b0ef
Server-Timing: app;dur=42.8

Record the correlation ID when investigating a failed or slow request. Do not log the API key itself.