There are no permission checkboxes to configure. Unlike most integrations, Navan fixes what an API credential can reach when you create it — a Booking Data API credential carries read access to booking records and nothing else. There is no step where you grant or withhold individual scopes, and no way for this credential to reach your card, user, or expense data.
Create an API credential in Navan
- Log in to Navan on the web. In the top left corner, click the Navan logo and select Admin.
- From the left menu, go to Travel → Settings → Integrations.
- In the Navan API Credentials section, click Create new.
- Description:
Human Intelligence Data Sync. This is just a label, and it appears in your company’s credential list. - Leave Allowed IP Addresses and Subnet Mask blank unless your security policy requires them — see the note below before filling them in.
- Click Create.
What this credential gives us
Navan’s Booking Data API declares a single permission, and it is read-only. We list it here so you know exactly what the credential you just created can reach.Enter your credentials
Navan shows the Secret Key once, in the pop-up that appears after you click Create — copy it before closing that window. If you lose it, open the credential in Navan, click Edit, and choose Rotate Key to issue a new one for the same Client ID.- Click Connect above to open the connection form.
- Paste your Client ID into the Client ID field.
- Paste your Secret Key into the Client Secret field — Navan calls it a Secret Key, our form calls it a Client Secret, and they are the same value.
- For API Base URL, enter
https://api.navan.com. If your company is on Navan’s European instance, enterhttps://app-fra.navan.cominstead — if you are unsure, check the address you use to reach Navan, or ask your Navan administrator. - Click Connect to save.
Security and API details
Questions? Contact us at support@humanintelligence.com.