Skill UI

This skill implements resilient API interaction patterns for external services. It uses adaptive rate-limiting techniques, including exponential backoff and jitter, to gracefully handle HTTP 429 errors, adapting to undocumented server limits. Furthermore, it provides a dedicated request queue mechanism to manage concurrency, ensuring reliable execution of large-scale, bulk data operations without triggering service throttling.

Use this guide when designing a robust, production-grade integration with the Navan API. It details a multi-layered architectural blueprint, including an API Gateway for rate limiting and circuit breaking, a centralized OAuth Token Management Service, secure data synchronization pipelines, and comprehensive monitoring stacks. Ideal for complex enterprise systems requiring reliable connectivity to travel and expense data.

Build a robust, typed API wrapper for Navan's REST endpoints, compensating for the lack of an official SDK. This pattern provides automated OAuth 2.0 token lifecycle management, built-in retry logic (for rate limiting and service downtime), and structured error handling, ensuring reliable, type-safe API interactions in production environments.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.

A guide to building resilient software integrations when dealing with external APIs that lack formal versioning, changelogs, or guaranteed backward compatibility. Learn defensive coding patterns, implementing schema drift detection via CLI tools (curl, jq), using fallback field names, and executing gradual feature flag rollouts to maintain production stability.

This skill provides a comprehensive framework for setting up and managing real-time webhooks from the Navan platform. It covers registering callback URLs, verifying payload signatures using HMAC-SHA256, and implementing idempotent event processing. It routes and handles key events related to the booking lifecycle, expense workflow, and travel disruptions, enabling seamless integration with internal systems.