Loxo AI and API: What's Included and What Costs More
A strong candidate can sit with a client for a week because the recruiter forgot the second follow-up. Carly can keep that submission moving. Loxo supplies the candidate, client, activity, stage, and placement context; Carly chases feedback, prepares the update, coordinates interviews and onboarding, and keeps the recruiter focused on the conversations that need judgment.
Loxo is not a gated ATS. Its API documentation is fully public and unauthenticated, and an account admin generates their own key from Settings — no partner program, no application, no sales call. In a category where JobAdder and Vincere both restrict access, that’s worth stating plainly.
The catch is that API access is a paid feature, and Loxo’s pricing page never says which tier includes it.
What agencies actually automate with it
Loxo has an unusually good event surface, so the jobs worth doing are the ones that depend on reacting quickly:
- Submittal follow-up that doesn’t stall. A candidate goes out to a client and the chase depends on the recruiter remembering — which is where most placements quietly die.
- Every logged call, email, and note as a trigger. Loxo fires an event on activity, so “if nobody has touched this candidate in a week, tell me” is straightforward.
- Pipeline movement that updates the client without a status-update email someone has to write.
- Placements that kick off onboarding — paperwork, start-date confirmations, the check-in on day one.
Worth knowing if you’re on Basic: Loxo’s own AI agents sit on the Professional tier, whose price isn’t published. The webhook plus an outside assistant gets you most of the automation without the upgrade, which is the practical route for a smaller agency.
Getting a key
Settings → API Keys, and Loxo’s help docs add three qualifiers:
- Admin only. “Only account admins can access this page.”
- It may not be there. “If you do not see the API Keys option available, please reach out to Loxo Support to request the feature be enabled.”
- It’s paid. “Access to our Open API is a paid feature. If you do not have an active subscription with us, please schedule a demo.”
Third-party developers touching your account are gated separately and have to join Loxo’s Developer Program.
Published tiers are Free ($0, one user), Basic at $169 per user per month, then Professional and Enterprise, both “Let’s chat.” The pricing page never names API access as a line item on any tier — only that it needs an active subscription. So Basic at $169 is the cheapest plausible entry, not a confirmed one. Per-user figures circulating on comparison blogs aren’t Loxo’s and shouldn’t be trusted.
Auth, and the error that lies to you
- Base URL
https://{domain}/api/{agency_slug}/...— domain defaults toapp.loxo.co, and enterprise tenants get their own - Auth is
authorization: Bearer <API_KEY> - The OpenAPI spec reports version 1.3.3, though the rendered docs page says v1.0. Trust the spec.
- Rate limits are not published. Zero mentions across the docs index, and no rate-limit or
Retry-Afterheaders come back on a live response. Don’t design against a number — build in backoff and discover your ceiling.
The single biggest time-waster here: 403 is Loxo’s 401. Every authentication failure — bad key, missing key, expired key — returns 403 Forbidden, never 401. So a broken credential reads as a permissions problem, and you go looking in the wrong place.
That compounds with two other 403 sources:
/api/v1/...is a trap. Loxo’s help center warns explicitly that endpoints like/api/v1/people“are not part of the Loxo Open API” and return 403. The path segment that looks like a version is actually your agency slug. Guessingv1gets you a 403 that reads as auth failure, and sends you off regenerating a key that was never the problem.- Whitespace in the agency slug silently 403s. A trailing space copy-pasted out of the settings UI is indistinguishable from a bad token.
Three identical 403s, three unrelated causes.
Write coverage is broad
Full create, update, and delete on people (plus emails, phones, social profiles, education, work history, documents, resumes, and list membership), companies (plus addresses, emails, phones, documents, and merge), jobs (including merge and an apply endpoint), candidates as pipeline entries, deals with stage-move events, placements, scorecards and templates, forms, and person events — logging calls, emails, notes, and meetings, advancing workflow stages, and rejecting with a reason.
There’s also SMS sending, person enrichment (which consumes credits), and a genuinely handy POST /people/update_by_email that updates by email without knowing the Loxo ID. AI Notetaker transcripts are readable through schedule items.
48 webhook combinations, self-registerable
Webhooks are full CRUD through the API — GET, POST, PUT, and DELETE on /{agency_slug}/webhooks — and every webhook route is API-key authenticated only. An integration can subscribe itself; nobody has to click through a UI.
A subscription is an item_type plus an action plus an endpoint URL. Three actions — create, update, destroy — across sixteen item types:
candidate · company · company_document · deal · deal_document · job · job_document · person · person_document · person_education_profile · person_event · person_event_document · person_job_profile · placement · placement_split · resume
That’s 48 combinations. The high-value ones for a staffing agency: person_event × create fires on every logged call, email, note, meeting, and workflow stage change. candidate × create/update covers pipeline movement. placement × create is a hire landing.
One documentation discrepancy to know: Loxo’s help center lists only ten item types, omitting all six document and resume types. The OpenAPI spec carries the fuller list. A developer working from the help center won’t know resume-upload events exist at all.
What “Loxo AI” actually gets you
This is the higher-volume search, and the answer is more about pricing than capability.
Loxo markets a genuine set of shipped features — Self-Updating CRM Agent, Contact-Info Finding Agent, Candidate Submittal Agent, AI Notetaker, plus AI Chat, Natural Language Search, AI Recommendations, and Outreach GPT. None carry beta or waitlist labels, and each agent has its own live product page. Loxo Source, its sourcing product, is API-reachable through a loxo_source_people endpoint.
Nearly all of it sits on Professional, whose price is unpublished. Loxo Source with unlimited access, Natural Language Search, AI Notetaker, access to the AI agents, and Outreach campaign automation are all Professional features. A $169 Basic seat gets none of the AI. Enterprise adds custom AI configuration.
So the honest answer to “how much is Loxo AI” is that you have to ask.
Two things not to repeat as fact. Loxo’s marketing claims recruiters see “5x more placements” and that it’s “500% more efficient” — vendor figures, unaudited. And its talent-graph size is stated inconsistently across its own site, quoted as 1.2 billion people in one place and 800 million in another. Cite neither as a hard number.
On “the Loxo MCP”: Loxo markets one on its homepage, but there’s no verifiable public endpoint — the obvious hostnames don’t resolve or 404, and there’s no product page. Separately, the “Loxo MCP server” that dominates search results is a third-party community project, not official. Treat the first-party MCP as announced rather than confirmed available.
Five more things
- Candidate ID is not person ID. The docs warn about this directly. Deleting a candidate removes them from a pipeline but leaves the underlying person record intact.
- Search is Lucene with non-obvious field names —
emailsnotemail, intake notes underdescription3, skills underskillsets3. - You can’t query
idto resolve known IDs — useinclude_idsinstead. - Two pagination styles depending on endpoint: scroll with a
scroll_id, or page and per_page. - Merges are irreversible on people, companies, and jobs.
Getting the event to do something
Forty-eight self-registerable event combinations is a strong surface — better than most of this category, and notably better than Crelate, which exposes none publicly.
Handing it to an AI assistant still hits the same wall.
The unattended-work gap closed in 2026: ChatGPT Scheduled Tasks and Claude Cowork both run on their own. The remaining gap is what starts them. These run on a timer, not in response to an event in your apps, so "when this happens, do that" is still outside what they do.
Loxo’s own agents cover real ground inside Loxo — keeping records current, finding contact information, drafting submittals. What they don’t do is reach across into your email, calendar, and the rest of your stack when something happens.
Carly sits there:
- Fires on the Loxo webhook —
person_eventcreated,candidateupdated,placementcreated - Runs the whole response in one flow — read the event, pull the person and job, draft the message, send it, log the activity back
- Actually sends — Gmail and Outlook, with attachments
- Works on Basic — since Loxo’s AI features are Professional-tier, the webhook plus an external agent is the affordable path to automation on the cheaper seat
Because Loxo exposes a public API, you can connect it natively to Carly from the Integrations tab with your API credentials. Carly can then use Loxo in on-demand, recurring, and event-triggered workflows. AI agents start at $35/month, and workflow steps that don’t use AI run free.
Frequently Asked Questions
Is the Loxo API free?
No. Loxo’s help center states that Open API access is a paid feature requiring an active subscription. The pricing page doesn’t name it as a line item on any tier, so which paid plan unlocks it isn’t published — Basic at $169 per user per month is the cheapest possibility.
How do I get a Loxo API key?
Settings → API Keys, as an account admin. If the option isn’t visible, Loxo Support has to enable it for your account. Outside developers working on your account must join Loxo’s Developer Program separately.
What webhooks does Loxo support?
Sixteen item types across three actions — create, update, and destroy — for 48 combinations, covering people, candidates, companies, jobs, deals, placements, documents, and resumes. They’re managed through the API itself. Note that Loxo’s help center lists only ten item types and omits the document and resume ones.
Why does the Loxo API keep returning 403?
Loxo returns 403 rather than 401 for every authentication failure, so a bad key looks like a permissions problem. Two other causes produce the same 403: calling /api/v1/... (the path segment is your agency slug, not a version), and stray whitespace in the slug.
Is Loxo AI included in the base plan?
No. Loxo Source, Natural Language Search, AI Notetaker, and the AI agents are Professional-tier features, and Professional’s price isn’t published. A Basic seat at $169 per user per month includes none of them.
Does Loxo have an MCP server?
Loxo markets one, but no public endpoint is verifiable and there’s no product page for it. The widely-shared “Loxo MCP server” on GitHub is an unofficial third-party project.
More: Best AI workflow automation tools · AI agents for HR and people ops · Best AI agents for productivity
Ready to automate your busywork?
Carly schedules, researches, and briefs you—so you can focus on what matters.
See what people say
"Before Carly, I relied on a Calendly link, but the whole process felt impersonal and not very professional. Carly changed that by handling all the back-and-forth, so I'm no longer stuck in endless email threads trying to line up schedules.
Now Carly reaches out to candidates, shares my real-time availability, lets them pick a slot, then sends a Zoom link and drops it straight into my calendar. She sends reminders to both of us before each call, which has significantly reduced no-shows and last-minute confusion.
On top of scheduling, Carly acts like a full executive assistant, sending me my schedule the night before so I can prepare for each call. It reminds me of the old x.ai assistant, but Carly is noticeably smarter, faster, and better suited to my healthcare recruitment business."
