API de Qubo

X-API-KEY: tu_clave_de_api

{
  "title": "Mesa 4 - Menú",
  "type": "dynamic",
  "url": "https://turestaurante.com/menu",
  "design": { "color": "#0F172A", "dots_style": "rounded", "corners_style": "leaf" }
}

# 1. Crear el QR
curl -X POST https://qubo.click/api/v1/qr \
  -H "X-API-KEY: tu_clave_de_api" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{"title": "Mesa 4 - Menú", "type": "dynamic", "url": "https://turestaurante.com/menu"}'

# 2. Descargar su imagen (usa el id de la respuesta)
curl "https://qubo.click/api/v1/qr/1284/image?format=png&size=1024" \
  -H "X-API-KEY: tu_clave_de_api" -o mesa-4.png

{
  "success": true,
  "data": {
    "id": 1284,
    "title": "Mesa 4 - Menú",
    "type": "dynamic",
    "content_type": "url",
    "content": "https://qubo.click/r/AB12CD",
    "short_code": "AB12CD",
    "short_url": "https://qubo.click/r/AB12CD",
    "redirect_url": "https://turestaurante.com/menu",
    "is_active": true,
    "images": {
      "svg": "https://qubo.click/api/v1/qr/1284/image?format=svg",
      "png": "https://qubo.click/api/v1/qr/1284/image?format=png"
    },
    "created_at": "2026-10-25T20:42:10+00:00"
  }
}

curl -X POST https://qubo.click/api/v1/qr/render \
  -H "X-API-KEY: tu_clave_de_api" \
  -H "Content-Type: application/json" \
  -d '{"content_type": "wifi", "payload": {"ssid": "Cafe_Invitados", "password": "cafe2026"}, "format": "svg"}' \
  -o wifi.svg

# Tus QR dinámicos con la etiqueta "menu", 50 por página
curl "https://qubo.click/api/v1/qr?type=dynamic&tag=menu&per_page=50" -H "X-API-KEY: tu_clave_de_api"

# Cambiar el destino de un QR dinámico (el QR impreso sigue sirviendo)
curl -X PATCH https://qubo.click/api/v1/qr/1284 \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"url": "https://turestaurante.com/menu-navidad"}'

# Pausarlo: quien lo escanee verá un aviso de "no disponible"
curl -X PATCH https://qubo.click/api/v1/qr/1284 \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"is_active": false}'

# Escaneos de los últimos 30 días
curl "https://qubo.click/api/v1/qr/1284/stats?days=30" -H "X-API-KEY: tu_clave_de_api"

{
  "success": true,
  "data": {
    "id": 1284,
    "days": 30,
    "from": "2026-09-27",
    "to": "2026-10-26",
    "total_scans": 412,
    "unique_visitors": 318,
    "timeline": [{ "date": "2026-10-25", "scans": 17 }, …],
    "breakdowns": {
      "device_type": [{ "label": "mobile", "total": 389 }, …],
      "country": [{ "label": "Colombia", "total": 371 }, …]
    }
  }
}

# Enlace corto con alias propio
curl -X POST https://qubo.click/api/v1/links \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"destination_url": "https://tutienda.com/promo", "alias": "promo-oct"}'

# Link de WhatsApp con el mensaje ya escrito
curl -X POST https://qubo.click/api/v1/whatsapp \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"phone": "+57 300 123 4567", "message": "Hola, quiero hacer un pedido"}'

# Cambiar el mensaje (el destino wa.me se arma solo)
curl -X PATCH https://qubo.click/api/v1/links/88 \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"message": "Hola, quiero reservar"}'

curl "https://qubo.click/api/v1/biolinks/4/leads?since=2026-10-01T00:00:00-05:00" -H "X-API-KEY: tu_clave_de_api"

{
  "success": true,
  "data": [{
    "id": 312,
    "form": "Reserve su viaje",
    "name": "Laura Gómez",
    "phone": "+57 310 555 1234",
    "email": "laura@correo.co",
    "answers": { "fecha_del_viaje": "2026-11-02", "numero_de_pasajeros": "3" },
    "consented_at": "2026-10-25T14:02:11+00:00",
    "created_at": "2026-10-25T14:02:11+00:00"
  }],
  "meta": { "current_page": 1, "last_page": 1, "per_page": 50, "total": 1 }
}

# Tu punto de venta suma un sello al leer el QR del cliente
curl -X POST https://qubo.click/api/v1/loyalty-programs/3/cards/k2Jd9xQ.../stamp -H "X-API-KEY: tu_clave_de_api"

# {"success": true, "data": {"result": "reward", "card": {"stamps": 0, "rewards_available": 1, ...}}}

# Un cupón que vence a fin de mes, con cupo de 200
curl -X POST https://qubo.click/api/v1/loyalty-programs/3/coupons \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"title": "2x1 en boletas 2D", "expires_on": "2026-11-30", "max_claims": 200}'

# Dáselo a un cliente y mándale el enlace (data.url) por WhatsApp
curl -X POST https://qubo.click/api/v1/loyalty-programs/3/coupons/7/claims \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" -d '{"card_code": "k2Jd9xQ..."}'

# Tu inventario cambió un precio: actualízalo en el menú
curl -X PATCH https://qubo.click/api/v1/catalogs/5/products/42 \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" -d '{"price": 9000}'

# Se agotó: pausarlo sin borrarlo
curl -X PATCH https://qubo.click/api/v1/catalogs/5/products/42 \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" -d '{"is_active": false}'

# Traer clientes de tu CRM o de un concurso (hasta 500 por llamada; repetir no duplica)
curl -X POST https://qubo.click/api/v1/customers \
  -H "X-API-KEY: tu_clave_de_api" -H "Content-Type: application/json" \
  -d '{"customers": [{"name": "Ana Gómez", "email": "ana@ejemplo.co", "whatsapp": "300 123 4567",
       "source": "Concurso de octubre", "consented_at": "2026-10-04T14:03:36-05:00"}]}'

# {"success": true, "data": {"created": 1, "updated": 0, "unchanged": 0}}

# Los que no vienen hace 30 días
curl "https://qubo.click/api/v1/customers?segment=lapsed" -H "X-API-KEY: tu_clave_de_api"

# Alguien pidió que borren sus datos
curl -X DELETE https://qubo.click/api/v1/customers -H "X-API-KEY: tu_clave_de_api" \
  -H "Content-Type: application/json" -d '{"email": "ana@ejemplo.co"}'

{
  "success": false,
  "message": "Revisa los datos enviados: El campo title es obligatorio.",
  "error": { "code": "validation", "message": "Revisa los datos enviados: El campo title es obligatorio." },
  "errors": { "title": ["El campo title es obligatorio."] }
}

{
  "id": "2f0c7a8e-5c1b-4a0e-9f4e-3d2b1a0c9e8f",
  "event": "qr.scanned",
  "occurred_at": "2026-10-07T20:42:10+00:00",
  "data": {
    "asset": { "type": "qr", "id": 1284, "title": "Mesa 4 - Menú", "short_code": "AB12CD" },
    "visitor": { "country": "CO", "device_type": "mobile", "browser": "Chrome", "platform": "Android" }
  }
}

// Node.js (Express): compara la firma con el cuerpo sin modificar
const crypto = require('crypto');

app.post('/webhooks/qubo', express.raw({ type: 'application/json' }), (req, res) => {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', process.env.QUBO_WEBHOOK_SECRET)
    .update(req.body)
    .digest('hex');
  const received = req.get('X-Qubo-Signature') || '';
  if (received.length !== expected.length ||
      !crypto.timingSafeEqual(Buffer.from(received), Buffer.from(expected))) {
    return res.sendStatus(401);
  }
  const event = JSON.parse(req.body);
  // ... tu lógica
  res.sendStatus(200);
});