Skill UI

A structured playbook for diagnosing and resolving critical disruptions within the Navan travel platform. It guides users through severity classification (P1-P4), utilizing built-in AI assistants (Ava), and performing essential API health checks using tools like curl and jq. This runbook ensures a systematic approach to handling failures related to bookings, OAuth tokens, and expense syncing, minimizing downtime and providing clear escalation paths.

This comprehensive guide details how to set up OAuth 2.0 client credentials for the Navan REST API. It provides complete, runnable code examples in both TypeScript (Node.js) and Python. Users can follow these steps to exchange client secrets for a secure bearer token, enabling programmatic access to Navan's booking and travel data. This is essential for configuring new Navan integrations or rotating API credentials.

This comprehensive guide establishes a structured local development environment for integrating with the Navan API. Since Navan does not provide a sandbox, this workflow is crucial for minimizing calls to the production API. It implements token caching to persist access tokens, detailed request logging for debugging, and mock fixtures to allow for reliable, safe offline testing during the development cycle.

This comprehensive playbook provides an end-to-end guide for migrating from legacy Travel Management Systems (like SAP Concur or other TMCs) to Navan. It covers critical phases including data inventory, user provisioning (via SCIM/API), manual policy recreation, parallel system running, and the final cutover checklist. Use this guide for planning and executing complex travel system migrations.

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

This skill provides a comprehensive framework for setting up robust observability for Navan API integrations in production environments. It guides users through implementing structured logging, tracking request latency, classifying various errors (auth, rate limit, server), and monitoring the OAuth token refresh lifecycle. Includes practical steps and YAML examples for configuring alerts and building dashboards in platforms like Datadog, CloudWatch, or Prometheus/Grafana.

This skill provides advanced architectural patterns for optimizing high-volume integrations with the Navan API. It addresses common bottlenecks like rate limiting, sequential calls, and naive pagination by implementing robust solutions such as data-type-specific response caching, controlled parallel fetching with concurrency throttling, efficient cursor-based pagination, and HTTP connection reuse. Use this when building scalable, reliable, and high-throughput systems.

A comprehensive checklist for validating the operational readiness of any Navan API integration before deployment to a live production environment. This guide covers critical areas including credential security (rotation, secret management), robust error handling, rate limit strategies, Single Sign-On (SSO) setup, data synchronization, and compliance auditing (PCI DSS, GDPR). Use this when ensuring mission-critical API stability.

This skill implements resilient API interaction patterns for external services. It uses adaptive rate-limiting techniques, including exponential backoff and jitter, to gracefully handle HTTP 429 errors, adapting to undocumented server limits. Furthermore, it provides a dedicated request queue mechanism to manage concurrency, ensuring reliable execution of large-scale, bulk data operations without triggering service throttling.

Use this guide when designing a robust, production-grade integration with the Navan API. It details a multi-layered architectural blueprint, including an API Gateway for rate limiting and circuit breaking, a centralized OAuth Token Management Service, secure data synchronization pipelines, and comprehensive monitoring stacks. Ideal for complex enterprise systems requiring reliable connectivity to travel and expense data.

Build a robust, typed API wrapper for Navan's REST endpoints, compensating for the lack of an official SDK. This pattern provides automated OAuth 2.0 token lifecycle management, built-in retry logic (for rate limiting and service downtime), and structured error handling, ensuring reliable, type-safe API interactions in production environments.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.