For developers · remote MCP server

QRBold MCP server for Cursor, VS Code and Claude Code

A hosted, OAuth-protected MCP server that gives your coding agent real QR code and digital business card tools. One snippet, a browser sign-in, nothing to run locally.

https://api.qrbold.com/mcp
Cursor — Agent

Create a QR code for https://staging.acme.dev/beta named “Beta invite” and save the SVG to public/qr/beta.svg.

Used QRBold · create_qr_code · get_qr_image

Created “Beta invite” (id qr_8f2…). Fetched the SVG via get_qr_image and wrote it to public/qr/beta.svg (2.1 KB). The destination can be changed later with update_qr_code.

Download PNG · SVG

Link valid 24 hours

Ask anything about your QR codes or cards…

How do I add the QRBold MCP server to Cursor or VS Code?

Add https://api.qrbold.com/mcp as an HTTP MCP server in your client’s config (.cursor/mcp.json or .vscode/mcp.json), then click the sign-in prompt the client shows. A QRBold page opens; sign in and click Allow. For headless use, send a QRBold API key as a bearer token instead.

Pick your client

The URL is the same everywhere; only the file name and the key names differ.

.cursor/mcp.json
{
  "mcpServers": {
    "qrbold": { "url": "https://api.qrbold.com/mcp" }
  }
}
  1. 1

    Create .cursor/mcp.json in your project (or ~/.cursor/mcp.json for all projects) with the snippet.

  2. 2

    Open Cursor Settings → MCP. QRBold appears with “Needs login”. Click it.

  3. 3

    Your browser opens on qrbold.com. Sign in, click Allow. The status turns green.

What the sign-in looks like

Every client ends up on the same two screens.

  1. 1

    The client says it needs to log in

    After you save the config, the client discovers that the server wants OAuth and shows a login button or prompt. Click it — it opens your browser.

    Cursor — Settings › MCP

    QRBold

    qrbold · 20 tools · Needs login

    Login click
  2. 2

    Sign in on qrbold.com and click Allow

    Sign in if you are not already, check the permissions, click Allow. The client receives a token and the tools appear. You can revoke that token any time under Settings → Developer API → Connected apps.

    Each client registers itself with QRBold the first time (dynamic client registration), so there is no client id or secret to configure.
    qrbold.com — Allow access

    Cursor wants to access your QRBold account

    It will be able to

    • List and retrieve digital business cards
    • Create, update and delete digital business cards
    • List and retrieve QR codes and their images
    • Create, update and delete QR codes
    • Read scan statistics

    Signed in as you@company.com

    DenyAllow click Allow

Prefer an API key? For scripts, CI and headless agents

When there is no browser to sign in with, create a key under Settings → Developer API → New API key with the AI assistant preset, and send it as a bearer token to the same URL. Same tools, same limits, no OAuth round-trip.

  • • Keys are shown once; store them in your secret manager.
  • X-API-Key works too if your client cannot set Authorization.
  • • Revoke from the same page; access ends on the next request.
  • • The REST API (for your own integrations) uses the same keys but needs a Pro or Business plan.
cursor — with API key
{
  "mcpServers": {
    "qrbold": {
      "url": "https://api.qrbold.com/mcp",
      "headers": { "Authorization": "Bearer <YOUR_API_KEY>" }
    }
  }
}

Technical details

Server URLhttps://api.qrbold.com/mcp
TransportStreamable HTTP, stateless (no session id required)
AuthenticationOAuth 2.1 with dynamic client registration and PKCE (S256); refresh tokens rotate. Or an API key as a bearer token.
Discovery/.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource/mcp (RFC 8414, RFC 9728)
Access token lifetime1 hour; refresh tokens 30 days, extended on use
Tools20 — account, cards (including bulk), templates, QR codes for links and files, QR design, QR images, card sharing, scan statistics
ResourcesAccount, card templates, and every card and QR code by URI (qrbold://cards/{id}) — attachable in clients that support resources
Prompts1 — “Create a digital business card” from pasted text
Rate limitPer credential per minute, by plan: 30 / 60 / 120. 429 with Retry-After when exceeded.
Plan requirementNone — included on every plan, including Free. Plan limits on codes and cards apply.
RevocationSettings → Developer API → Connected apps (OAuth) or → API keys. Immediate on next request.

Tool-by-tool reference, scopes and behaviour notes are in the Developer API section of your dashboard.

Developer questions

Get started

Give your agent a QR code tool in one snippet

Free account, one config entry, one browser sign-in. Your agent can create and update QR codes and digital business cards from the next prompt.

Start Free

No credit card required