> ## Documentation Index > Fetch the complete documentation index at: https://docs.kiwify.com.br/llms.txt > Use this file to discover all available pages before exploring further. # List Dynamic QR Codes > Lists dynamic PIX QR codes with optional filters by external_reference_id and transaction_id. Results are paginated using cursor-based pagination. ## OpenAPI ````yaml /api-reference/banking/openapi.json get /v1/dynamic-qrcode openapi: 3.1.0 info: title: Digital Account API description: Public API for account management, statements, and PIX operations license: name: '' version: 0.1.0 servers: - url: https://conta-public-api.kiwify.com description: Production environment security: [] tags: - name: Account description: Account details, balance, limits, and PIX keys - name: Statement description: Account statement and transaction history - name: Cash out Pix description: Send money via PIX transfers - name: Cash in Pix description: Refund PIX transactions - name: Boleto Payments description: Pay boletos via API - name: PIX QR Codes description: PIX QR code generation for receiving payments - name: Webhooks description: >- Manage webhook subscriptions to receive real-time event notifications from the API. paths: /v1/dynamic-qrcode: get: tags: - PIX QR Codes summary: List Dynamic QR Codes description: >- Lists dynamic PIX QR codes with optional filters by external_reference_id and transaction_id. Results are paginated using cursor-based pagination. operationId: list_dynamic_qrcodes parameters: - name: external_reference_id in: query description: External reference identifier to filter QR codes required: false schema: type: - string - 'null' - name: transaction_id in: query description: >- Filter to QR codes whose most recent payment has this transaction ID. required: false schema: type: - integer - 'null' format: int64 - name: limit in: query description: 'Maximum number of QR codes to return (1-100, default: 20)' required: false schema: type: - integer - 'null' format: int32 minimum: 0 - name: cursor in: query description: Cursor for pagination required: false schema: type: - string - 'null' responses: '200': description: QR codes retrieved successfully content: application/json: schema: $ref: '#/components/schemas/GetDynamicQrcodesResponse' '400': description: Invalid query parameters content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '401': description: Authentication failed content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '403': description: Access denied - missing ManageQRCode permission content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - AccessId: [] PoPChallenge: [] PoPFormat: [] PoPSignature: [] components: schemas: GetDynamicQrcodesResponse: type: object required: - qrcodes properties: next_cursor: type: - string - 'null' description: >- Cursor for the next page of results. If null, there are no more results. qrcodes: type: array items: $ref: '#/components/schemas/DynamicQrcodeItemResponse' description: List of dynamic QR codes ErrorResponse: type: object required: - error - timestamp properties: error: $ref: '#/components/schemas/ErrorDetails' description: Error payload. timestamp: type: string format: date-time description: ISO 8601 / RFC 3339 UTC timestamp of when the error occurred. example: '2026-05-28T14:30:00Z' DynamicQrcodeItemResponse: type: object required: - id - type - status - copy_paste_code - picture_code_base64 - created_at - updated_at properties: copy_paste_code: type: string description: PIX copy-paste code (BR Code) example: 00020126... created_at: type: string format: date-time description: QR Code creation timestamp (UTC, RFC 3339). example: '2026-05-28T14:30:00Z' external_reference_id: type: - string - 'null' description: External reference ID provided by the client (if any) example: order-12345 id: type: string format: uuid description: Unique QR Code identifier picture_code_base64: type: string description: QR Code image in base64 format status: $ref: '#/components/schemas/QRCodeStatus' description: 'QR Code status: active, cancelled, or completed' transaction_id: type: - integer - 'null' format: int64 description: ID of the most recent transaction that paid this QR code. example: 880123 type: $ref: '#/components/schemas/QRCodeType' description: 'QR Code type: INSTANT or DUE_DATE' updated_at: type: string format: date-time description: QR Code last update timestamp (UTC, RFC 3339). example: '2026-05-28T14:30:00Z' ErrorDetails: type: object required: - code - message properties: code: type: string description: >- Machine-readable error code. Use this for branching logic, not `message`. example: INVALID_REQUEST details: type: object description: >- Optional structured details. For `INVALID_REQUEST`, may be an array of field validation errors or a `validation_failed` object depending on the endpoint. message: type: string description: >- Human-readable error description. Do not rely on this text for programmatic handling. QRCodeStatus: type: string enum: - waiting_payment - paid - cancelled QRCodeType: type: string enum: - INSTANT - DUE_DATE securitySchemes: AccessId: type: apiKey in: header name: x-access-id description: UUID of the service account (e.g., 550e8400-e29b-41d4-a716-446655440000) PoPChallenge: type: apiKey in: header name: X-PoP-Challenge description: >- Unix timestamp in milliseconds (e.g., 1704636800000). Must be within 5 minutes of server time. PoPFormat: type: apiKey in: header name: X-PoP-Format description: Must be 'service-account' for service account authentication PoPSignature: type: apiKey in: header name: X-PoP-Signature description: >- EdDSA signature of the request in base64 format. Signs: uri:method:body:timestamp ````