QR Code Generator API with Logo
PNG/SVG QR codes for URLs, WiFi, vCards, email, and SMS, with branded colors and optional logo overlay.
New7 live API categories on RapidAPI
Developer utilities, AI content, email and domain validation, website and SEO checks, QR codes, and public social data — all returning clean, predictable JSON. Skip the scrapers, the proxy pools, and the weeks of glue code.
Keys, plans, and billing are handled by RapidAPI — no separate ApiMask account.
HOST="instagram-api.p.rapidapi.com"
curl --request GET \
--url "https://$HOST/v1/instagram/profile?username=nasawebb" \
--header "X-RapidAPI-Key: $RAPIDAPI_KEY" \
--header "X-RapidAPI-Host: $HOST"{
"success": true,
"data": {
"id": "549313808",
"username": "nasawebb",
"full_name": "NASA Webb Telescope",
"is_verified": true,
"followers_count": 3547801,
"following_count": 35,
"media_count": 1302,
"source": "apify",
"fetched_at": "2026-07-20T10:10:24.746979+00:00"
},
"error": null,
"meta": { "request_id": "req_example" }
}RapidAPIdistribution and billing
7live API categories
28documented endpoints
JSONconsistent response envelope
Documentation
Most of the time lost integrating an API goes into working out what it really returns. Every ApiMask endpoint is documented with the call, the response, and every field it contains.
Every endpoint page shows the exact call and the exact JSON it returns — not a schema you have to mentally render.
Correct hosts, correct headers, correct body. Paste it into a terminal and it works.
Types, whether it's required, what it does, and what it can be null. No guessing from example payloads.
curl --request POST \
--url https://apimask-developer-utilities-api.p.rapidapi.com/v1/dev/email/validate \
--header "Content-Type: application/json" \
--header "X-RapidAPI-Key: $RAPIDAPI_KEY" \
--data '{"email":"[email protected]"}'{
"success": true,
"data": {
"is_valid": true,
"email": "[email protected]",
"domain": "example.com",
"is_disposable": false,
"has_mx_records": true,
"is_role_account": false,
"reason": null
},
"error": null,
"meta": {}
}Catalog
Seven live categories today, with more on the public roadmap. Every live category links straight into its documentation.
Regex, stacktraces, JSON, Base64, hashing, IDs, URL parsing
SEO meta tags, summaries, rewrites, descriptions, captions
Validation, bulk lists, MX/DNS, deliverability
SSL, security headers, URL safety, CORS
URL, WiFi, vCard, branded logo QR codes
Meta tags, robots.txt, sitemaps
Twitter/X and Instagram profile and content data
PDF-to-Markdown, table & field extraction, OCR cleanup
ATS scoring, keyword gaps, resume rewrite
Metadata, keywords, release notes, review sentiment
Company, email, and domain enrichment
URL safety, breach checks, header hardening
Tool endpoints and structured extraction for agents
Products
Each bundles a set of related endpoints behind a single subscription, with its own plans and quota.
PNG/SVG QR codes for URLs, WiFi, vCards, email, and SMS, with branded colors and optional logo overlay.
Summaries, rewrites, SEO meta tags, blog outlines, product descriptions, social captions, headlines, and FAQs.
Validate JSON batches and CSV uploads, flag disposable and role-account emails, and check MX, SPF, and DMARC readiness.
Built to integrate
The expensive part of consuming an API isn't the first call — it's every inconsistency you discover afterwards.
Every endpoint returns the same { success, data, error, meta } shape, so error handling is written once and reused everywhere.
Endpoints are namespaced under /v1. Breaking changes ship as a new version, never as a silent change to an existing one.
A single error catalog covers every product, with the status codes and payloads to expect and what to do about each.
Requests are processed and returned. Bodies are not retained after the response is sent.
Security
Because distribution runs through RapidAPI, most of the surface area you'd normally have to review simply isn't yours to manage.
RapidAPI issues, rotates, and revokes your key, and enforces your plan's quota. There is no second credential to manage or leak.
All traffic to *.p.rapidapi.com is encrypted in transit. Plain HTTP is not served.
Payloads are processed to build the response and then discarded — relevant if you're passing customer emails or page content.
The social and website endpoints read publicly accessible data. Nothing requires you to hand over end-user credentials.
Use cases
Stop rewriting the same utilities in every project. Regex, hashing, IDs, JSON, URL parsing, CORS, and stacktrace analysis behind one key.
Keep junk out of the funnel. Validate emails at signup, clean CRM imports in bulk, and qualify domains before they reach analytics.
Turn one-off technical checks into repeatable audits: SSL, security headers, robots.txt, sitemaps, and generated metadata.