XML API: URL AND PROTOCOLS
This XML API serves for the purpose of looking up call data for logbook programs and is reachable at the following URLs:
This XML API is mostly compatible to the one at qrz.com, but there are some small changes and additions.

Login and token works the same way, GET parameter separator can be ';' or '&', all methods are GET only.

Tokens are valid for 3 days at this time, you should use it as long as possible. Invalid tokens will be also messaged the same way. Do not get a new token for every single query.

Check answers from server to be sure you got right data. For batch processing you can always asume the token to be valid for the running time.

All data should be properly encoded, if password contains one of the possible separators, then it should be properly url-encoded. If the password contains special chars, those should be additionally UTF-8 encoded.

XML API: FIELDS AND DATA TYPES
FieldDescription
nameText only.
qthText only
addressText only (street and number)
cityText only (city without zip)
zipText or number, varies with country.
licenseText only, some entries have proper char or number.
continentText, always 2 chars.
countryCountry name, text only.
stateState, if applicable to country.
countyUS county.
bmanagerBureau manager, call only.
managerDirect manager, call only.
locatorMaidenhead locator, 4 or 6 chars.
latitudeDecimal latitude, signed.
longitudeDecimal longitude, signed.
websiteURL only.
dxccInteger, 0 < dxcc < 1000
ituInteger, 0 < itu < 100
cqInteger, 0 < cq < 100
iotaIOTA continent and number, format: EU-001.
plotPolish OT number.
dokGerman DOK name, mosty 3 chars, but special can be longer.
eqsleQSL: 0 = no, 1 = yes.
lotwLoTW: 0 = no, 1 = yes.
bqslBureau QSL: 0 = no, 1 = yes.
mqslMail (direct) QSL: 0 = no, 1 = yes.
utf8Set to 1 if any of previous fields contain non-Ascii characters. All else 0.
qslpicURL of the QSL or user picture if user have any.
prefixMain country prefix, text only.

XML API: MISCELLANEOUS
# https://ssl.qrzcq.com/xml?username=DO5SSB&password=false

<?xml version="1.0" encoding="utf-8" ?>
<QRZCQDatabase version="1.01" xmlns="http://qrzcq.com"> 
	<Session> 
		<Error>Password Incorrect</Error> 
		<GMTime>Wed Feb 26 20:35:35 2014</GMTime> 
		<Remark>cpu: 0.004s</Remark> 
	</Session> 
</QRZCQDatabase>

# https://ssl.qrzcq.com/xml?username=N0CALL&password=secret

<?xml version="1.0" encoding="utf-8" ?> 
<QRZCQDatabase version="1.01" xmlns="http://qrzcq.com"> 
	<Session> 
		<Key>xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</Key> 
		<Count>18231</Count> 
		<SubExp>Sat Mar 1 20:13:59 2014</SubExp> 
		<GMTime>Wed Feb 26 20:16:05 2014</GMTime> 
		<Remark>cpu: 0.005s</Remark> 
	</Session> 
</QRZCQDatabase>

# https://ssl.qrzcq.com/xml?s=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&callsign=DO5SSB

<?xml version="1.0" encoding="utf-8" ?>
<QRZCQDatabase version="1.01" xmlns="http://qrzcq.com">
	<Callsign>
		<call>DO5SSB</call>
		<dxcc>230</dxcc>
		<name>Grzegorz Surmann</name>
		<qth>Buchholz, near Hamburg</qth>
		<address>Amselweg 1 a</address>
		<city>Buchholz</city>
		<zip>21244</zip>
		<license>E</license>
		<continent>EU</continent>
		<country>Germany</country>
		<state>NDS</state>
		<locator>JO43WH</locator>
		<latitude>53.3199308</latitude>
		<longitude>9.8597973</longitude>
		<website>http://do5ssb.blogspot.de/</website>
		<itu>28</itu>
		<cq>14</cq>
		<eqsl>1</eqsl>
		<lotw>0</lotw>
		<bqsl>0</bqsl>
		<mqsl>1</mqsl>
		<utf8>0</utf8>
		<qslpic>http://qrzcq.com/qslpic/do5ssb.jpg</qslpic>
		<prefix>DL</prefix>
	</Callsign>
	<Session>
		<Key>xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</Key>
		<Count>18232</Count>
		<SubExp>Sat Mar 1 20:13:59 2014</SubExp>
		<GMTime>Wed Feb 26 20:22:21 2014</GMTime>
		<Remark>cpu: 0.006s</Remark>
	</Session>
</QRZCQDatabase>

# https://ssl.qrzcq.com/xml?s=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&callsign=N0CALL

<?xml version="1.0" encoding="utf-8" ?>
<QRZCQDatabase version="1.01" xmlns="http://qrzcq.com"> 
	<Session> 
		<Error>Not found: N0CALL</Error> 
		<GMTime>Wed Feb 26 20:30:53 2014</GMTime> 
		<Remark>cpu: 0.009s</Remark> 
	</Session> 
</QRZCQDatabase>

# https://ssl.qrzcq.com/xml?s=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&callsign=N0CALL

<?xml version="1.0" encoding="utf-8" ?>
<QRZCQDatabase version="1.01" xmlns="http://qrzcq.com"> 
<Session> 
		<Error>Session Timeout</Error> 
		<GMTime>Wed Feb 26 20:33:54 2014</GMTime> 
		<Remark>cpu: 0.596s</Remark> 
	</Session> 
</QRZCQDatabase>	
XML API: CHANGELOG AND VERSIONS
xxx xxx xx xxxxxxxx xxx xxxx - Ver. 1.00 - Initial version
Tue Jun 17 14:03:14 UTC 2014 - Ver. 1.01 - Field 'qslpic' added
Thu Nov 20 16:22:53 UTC 2014 - Ver. 1.02 - Field 'prefix' added