---
title: AI QR Code Generator
emoji: 🌍
colorFrom: gray
colorTo: pink
sdk: gradio
sdk_version: 5.49.1
app_file: app.py
hf_oauth: true
pinned: false
license: apache-2.0
tags:
- mcp-server-track
---

Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference


## Demo
[Watch the demo video](showcase.mp4)

## Optional analytics

The Space includes an optional analytics consent toggle for both UI and MCP usage.

- Generated images are not used for analytics.
- Full prompts, QR payload text, and settings are only stored when analytics opt-in is enabled.
- Minimal operational events can still be logged for reliability and product metrics.

## URL normalization

When `Input Type` is set to `URL`, the app normalizes links on CPU before any GPU work starts.

- Common tracking params such as `utm_*`, `fbclid`, and `gclid` are removed automatically.
- Scheme and host casing are normalized to reduce unnecessary QR payload length.
- Plain text payloads are left untouched.

## Temporary short links

When enabled in the UI, URL mode can replace the QR payload with a `qrcut.co` short link.

- The shortener is opt-in and defaults to off.
- Short links expire after 7 days of inactivity.
- If the shortener is unavailable, generation falls back to the normalized original URL.

### Required Space secrets

- `SUPABASE_URL`
- `SUPABASE_SERVICE_ROLE_KEY`
- `POSTHOG_API_KEY` (or reuse `POSTHOG_SECRET_KEY`)
- `POSTHOG_HOST` (optional, defaults to `https://us.i.posthog.com`)
- `ANALYTICS_ENABLED` (optional, defaults to `true`)
- `ANALYTICS_DEFAULT_OPT_IN` (optional, defaults to `false`)
- `ANALYTICS_PRODUCT` (optional, defaults to `ai_qr_generator`; use as the deployment default)
- `URL_SHORTENER_API_URL` (optional, for example `https://qrcut.co/shorten`)
- `URL_SHORTENER_API_KEY` (optional, private API key for the HF Space)
- `URL_SHORTENER_SOURCE_APP` (optional, defaults to `ai_qr_generator`; used as the fallback caller app when requests do not provide an override header)
- `URL_SHORTENER_TIMEOUT_SECONDS` (optional, defaults to `10`)

### Hugging Face OAuth

`OAUTH_CLIENT_ID` and `OAUTH_CLIENT_SECRET` are not manual Space secrets here.
They are injected automatically by Hugging Face when `hf_oauth: true` is present in the Space metadata.

### Optional request headers for shared backends

When multiple surfaces share the same generator backend, the caller can override attribution per request:

- `X-Source-App`: per-request caller identity used for qrcut `source_app` and stored as `caller_app` in analytics
- `X-Analytics-Product`: optional per-request analytics product override; if omitted, backend uses `ANALYTICS_PRODUCT`

Recommended pattern:

- HF Space traffic: send no override headers and let the backend default to `ai_qr_generator`
- Arti iOS traffic: send `X-Source-App: arti_qrcode_app`
- if Arti should also write into a separate analytics product lane, additionally send `X-Analytics-Product: arti_qrcode_app`

### Supabase schema

Apply `analytics_supabase_schema.sql` to your Supabase project before enabling writes from the Space.

The analytics schema is intended for backend-only writes using `SUPABASE_SERVICE_ROLE_KEY`.
Do not grant `anon` or `authenticated` direct access to the analytics tables or derived views.