There may be more parameters in the wild, not specified anywhere. For instance, FreeOTP's online QR code generator includes counter (only for HOTP, not for TOTP), lock (a boolean?) and image (a URL‽).