# Levitate

> Levitate is a relationship-marketing "Happiness Platform" for relationship-based small businesses —
> insurance agencies, financial advisors, law and accounting firms, nonprofits, mortgage and real
> estate brokers, home services, chiropractic and dental practices. Founded 2017 in Raleigh, North
> Carolina by ShareFile founder Jesse Lipson; the legal entity is Real Magic. Developers reach Levitate
> two ways: a REST Public API over contacts, key facts, companies and notes, and a hosted remote MCP
> server that gives AI assistants natural-language access to a much wider slice of the product.

Generated by API Evangelist on 2026-08-25 from Levitate's public documentation and live probes.
This file is NOT published by Levitate — Levitate serves no llms.txt on any of its hosts.

## Public API (REST)

- [Public API guide](https://help.levitate.ai/article/735-levitate-public-api): what the API covers, credentials, scopes, use cases, best practices and troubleshooting.
- [API reference (Scalar)](https://api.levitate.ai/docs/): interactive reference with a built-in OAuth authorization panel.
- [OpenAPI 3.1.1 document](https://api.levitate.ai/openapi/public-v1.json): 19 operations across Contacts, Companies and Notes; 40 component schemas.
- [API Keys](https://help.levitate.ai/article/322-api-keys): generating a Personal API Key; Zapier vs Personal key types.
- [OAuth clients](https://help.levitate.ai/article/736-oauth-clients-for-the-public-api): self-serve OAuth client creation, PKCE-only, 1-5 https redirect URIs.

Base URL: https://api.levitate.ai/public/v1
Auth: `Authorization: Bearer <token>` — a Personal API Key or an OAuth 2.0 authorization-code + PKCE token.
Scopes: `levitate:contacts` (contacts, companies, notes AND key facts), `levitate:campaigns` (declared, no public endpoints yet).
Paging: cursor — `limit` (default 25, max 100), `pageToken`, `sort` (`creationDate` default desc, or `name`; `-` prefix reverses).
Errors: proprietary `OperationResult` envelope — `success`, `systemMessage`, `systemCode`, `error`, `requestId`. Not RFC 9457.
Gating: the Public API feature must be enabled per account by a Levitate Success Specialist; it is listed as a Levitate Preferred plan feature.

Operations:
- Contacts: GetContactById, ListContacts, SearchContacts (nested AND/OR/NOT filter tree), CreateContact, UpdateContact
- Key facts: ListContactKeyFacts, AddContactKeyFact, GetContactKeyFactById, ReplaceContactKeyFact, DeleteContactKeyFact
- Companies: GetCompanyById, ListCompanies, CreateCompany, UpdateCompany, DeleteCompany
- Notes: GetNoteById, ListNotes, CreateNote, DeleteNote

## MCP server

- [Levitate MCP Server](https://help.levitate.ai/article/589-levitate-mcp-server): setup for Claude Desktop, Claude Code, ChatGPT, Cursor, VS Code Copilot and Windsurf, plus the full capability list.
- [MCP server webinar](https://help.levitate.ai/article/723-levitate-mcp-server-webinar)

Endpoint: https://mcp.levitate.ai/mcp (streamable HTTP)
Auth: OAuth 2.0 authorization code + PKCE via https://login.levitate.ai — no API keys. RFC 9728 protected-resource metadata at /.well-known/oauth-protected-resource/mcp.
Claude Code: `claude mcp add --transport http levitate https://mcp.levitate.ai/mcp`
Reaches: contact search/profile/timeline/tagging/edits, company search, notes search, action items, donations, campaigns, opportunities, insurance policies, email drafts, email campaigns and templates, social posts, file upload, and live data from 11+ connected integrations.
Note: the MCP surface is WIDER than the REST API — most of that list has no REST endpoint.

## Operations, trust and status

- [Release notes](https://help.levitate.ai/category/108-latest-releases): monthly, back to December 2021.
- [Status page](https://status.levitate.ai)
- [Trust Center](https://trust.levitate.ai): SOC 2 Type I and Type II (auditor Prescient Assurance); SOC 2 report and DR plan under MNDA.
- [Compliance & due diligence](https://help.levitate.ai/article/588-compliance-due-dilligence-resources)
- [Vulnerability disclosure](https://www.levitate.ai/vulnerability-disclosure): report to security@levitateapp.com; no monetary rewards.
- [AI features data privacy FAQ](https://help.levitate.ai/article/726-ai-features-data-privacy-faq)

## Commercial

- [Plans](https://www.levitate.ai/pricing): Essential / Preferred / Prestige plus three Website tiers. No prices published; every tier is "Book a Demo" or "Talk to Sales".
- [Integrations](https://www.levitate.ai/integrations)
- [Blog — The Loyalty Loop](https://www.levitate.ai/blog)
- [Help Center](https://help.levitate.ai/)
- [Terms of Service](https://www.levitate.ai/terms-of-service)
- [Privacy Policy](https://www.levitate.ai/privacy-policy)
- [Sign in](https://login.levitate.ai/)

## Optional

- No first-party SDK exists on npm, PyPI, RubyGems, Packagist, NuGet or crates.io. Levitate's docs say the API "is not a plug-and-play solution" and using it "means writing and maintaining your own code".
- No public Postman collection or workspace found.
- No webhooks, event stream or AsyncAPI surface is published.
- No rate limits are documented and no 429 or RateLimit-* header is declared in the spec.
- No sandbox, test mode or test credentials are published.
- No A2A agent card is served at /.well-known/agent-card.json or /.well-known/agent.json on any Levitate host.