HonestQR MCP Server

Generate scannable QR codes straight from Claude, Cursor, or any Model Context Protocol (MCP) client. The server is free, needs no API key, and every generated code is decoded server-side before it is returned — if it does not scan, you never receive it.

Endpoint

URL: https://qr.zalize.com/mcp

Remote MCP server over Streamable HTTP. No authentication required; requests are rate-limited to 30/minute per IP.

Listed in the official MCP Registry as com.zalize.qr/honestqr

Setup

Claude Desktop

Settings → Developer → Edit Config, then add to claude_desktop_config.json (uses the mcp-remote bridge):

{
  "mcpServers": {
    "honestqr": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://qr.zalize.com/mcp"]
    }
  }
}

Claude Code

One command:

claude mcp add --transport http honestqr https://qr.zalize.com/mcp

Cursor

Settings → MCP → Add new global MCP server, or edit ~/.cursor/mcp.json:

{
  "mcpServers": {
    "honestqr": {
      "url": "https://qr.zalize.com/mcp"
    }
  }
}

Try it without a client

The official MCP Inspector gives you a web UI to call the tools directly:

npx @modelcontextprotocol/inspector https://qr.zalize.com/mcp

Tools

generate_qr

QR codes for URL, text, Wi-Fi, vCard, SMS, WhatsApp, geo location and calendar events. PNG or SVG, custom colors or themes, size 128–2048 px, error correction L/M/Q/H.

generate_pixel_art_qr

Artistic halftone QR codes with embedded pixel text (up to 8 characters) or one of 26 built-in pixel icons, plus 12 gradient themes. Always error correction H.

decode_qr

Decode a QR code from a base64 PNG image; returns the payload and its detected type (url, wifi, vcard, …).

list_themes

The 20 color themes (8 solid + 12 gradient) accepted by both generators.

list_icons

The 26 pixel icons accepted by generate_pixel_art_qr, with ASCII previews.

Example

“Generate a Wi-Fi QR code for network CafeGuest, password sunshine42, in the sunset-glow theme.”

The tool returns the PNG plus a verification block confirming the code was decoded server-side and the payload matches exactly — no made-up results.

The honest part

  • Every code is decode-verified with a real QR reader before you get it.
  • Static codes are static: the content is in the pixels, nothing expires, no ransom.
  • Free, no account, no API key. Rate limit: 30 requests/minute per IP.

See also