Built to be driven by code

Nine REST endpoints, signed webhooks on every scan, and an MCP server so an AI assistant can manage links without touching the dashboard. API access is included on Enterprise at $19.99 a month.

Get an API key See pricing

Authentication

Send your key as a bearer token. Keys are stored as SHA-256 hashes, scoped to one workspace, and rate limited to 100 requests a minute.

curl https://reroutehq.com/api/v1/analytics \
  -H "Authorization: Bearer $RR_API_KEY"

{
  "totals": { "scans": 18422, "conversions": 341 },
  "topLinks": [
    { "shortId": "menu", "scans": 6120 },
    { "shortId": "q3-flyer", "scans": 4380 }
  ],
  "countries": [
    { "country": "US", "scans": 11204 },
    { "country": "CA", "scans": 3311 }
  ]
}

Endpoints

GET/api/v1/links

List links with search, tag filter, sorting and pagination up to 100 per page.

POST/api/v1/links

Create a link. Set a custom slug, tags, iOS and Android destinations, expiry or a scan cap.

PATCH/api/v1/links/:id

Repoint a link. There is no monthly allowance on how often you do this.

POST/api/v1/links/bulk

Create, update or delete up to 100 links in one call.

GET/api/v1/analytics

Time series plus totals, top links, devices, browsers, countries, cities, UTM breakdown and referrers.

GET/api/v1/analytics/export

Raw scan events as CSV, up to 50,000 rows per request.

POST/api/v1/qr

Render a QR code server side as PNG or SVG, 100 to 4096 pixels, with your own colors.

POST/api/v1/barcode

Render UPC-A, EAN-13, EAN-8, ITF-14, GS1-128 or Code 128 with check digit validation.

POST/api/v1/track

Post a conversion back against a click ID to tie revenue to the scan that caused it.

MCP server

Point any MCP capable assistant at the endpoint and it can work with your links directly. Four tools are exposed: list_links, create_link, get_analytics and track_conversion. Same bearer token, same rate limits.

claude_desktop_config.json

{
  "mcpServers": {
    "reroute": {
      "url": "https://reroutehq.com/api/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Then ask in plain language. Which links did best in Germany last month. Create twelve tagged links for the autumn catalogue. Export scans for the print campaign.

Webhooks

Register an endpoint and we post to it on every scan, signed with HMAC SHA-256 so you can verify it came from us. Delivery happens after the redirect has already been served, so a slow or failing endpoint never delays the person scanning.

Rate limits

API, per key100 / min
Redirects, per IP60 / min
Auth attempts, per IP10 / min

Every response carries the standard X-RateLimit headers.

Full reference lives in the dashboard

Create an account to get a key, then the Developers tab has request and response shapes, webhook payloads and the signature verification recipe.

Create an account