> ## Documentation Index
> Fetch the complete documentation index at: https://docs.humanintelligence.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Navan

> Sync corporate travel bookings — flights, hotels, and trip spend — to analyze travel cost per employee, team, and destination.

Navan's Booking Data API lets us pull your corporate travel bookings — flights, hotels, and the spend attached to each trip — to power reporting on travel cost per employee, team, and destination. You'll create an API credential in your own Navan account, which issues a **Client ID** and **Secret Key**, and paste those into our connection form. Authentication uses the **Client Credentials** OAuth flow — server-to-server, with no browser redirect. You'll need admin access to your Navan account to reach the Integrations settings.

<Info>
  **There are no permission checkboxes to configure.** Unlike most integrations, Navan fixes what an API credential can reach when you create it — a Booking Data API credential carries read access to booking records and nothing else. There is no step where you grant or withhold individual scopes, and no way for this credential to reach your card, user, or expense data.
</Info>

## Create an API credential in Navan

* Log in to Navan on the web. In the top left corner, click the Navan logo and select **Admin**.
* From the left menu, go to **Travel → Settings → Integrations**.
* In the **Navan API Credentials** section, click **Create new**.
* **Description:** `Human Intelligence Data Sync`. This is just a label, and it appears in your company's credential list.
* Leave **Allowed IP Addresses** and **Subnet Mask** blank unless your security policy requires them — see the note below before filling them in.
* Click **Create**.

<Warning>
  **If you restrict the credential by IP address,** our sync will be blocked until our egress addresses are on that allowlist — and Navan lets you replace an IP or subnet, but not add a second one. Contact us at [support@humanintelligence.com](mailto:support@humanintelligence.com) for our current egress IPs before setting this.
</Warning>

## What this credential gives us

Navan's Booking Data API declares a single permission, and it is read-only. We list it here so you know exactly what the credential you just created can reach.

| Scope           | Why we need it                                                                                                                                                                                                                     |
| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `bookings:read` | Your company's travel bookings — flights, hotels, trip dates, traveler, and the transaction detail attached to each booking. This is the entire dataset behind every travel metric we report; without it there is nothing to sync. |

## Enter your credentials

Navan shows the **Secret Key** once, in the pop-up that appears after you click Create — copy it before closing that window. If you lose it, open the credential in Navan, click **Edit**, and choose **Rotate Key** to issue a new one for the same Client ID.

* Click **Connect** above to open the connection form.
* Paste your **Client ID** into the **Client ID** field.
* Paste your **Secret Key** into the **Client Secret** field — Navan calls it a Secret Key, our form calls it a Client Secret, and they are the same value.
* For **API Base URL**, enter `https://api.navan.com`. If your company is on Navan's European instance, enter `https://app-fra.navan.com` instead — if you are unsure, check the address you use to reach Navan, or ask your Navan administrator.
* Click **Connect** to save.

## Security and API details

|                    |                                                                                                                                                                                             |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Authentication     | OAuth 2.0, client credentials grant                                                                                                                                                         |
| Token endpoint     | [https://app.navan.com/ta-auth/oauth/token](https://app.navan.com/ta-auth/oauth/token) (EU: [https://app-fra.navan.com/ta-auth/oauth/token](https://app-fra.navan.com/ta-auth/oauth/token)) |
| API base URL       | [https://api.navan.com](https://api.navan.com) (EU: [https://app-fra.navan.com](https://app-fra.navan.com))                                                                                 |
| Data accessed      | Booking records only, via GET /v1/bookings. No card, expense, or user-directory data.                                                                                                       |
| Access             | Read-only — no write endpoint is ever called                                                                                                                                                |
| Token lifetime     | About 12 hours; we refresh automatically, so you never re-enter credentials.                                                                                                                |
| Credential storage | Encrypted at rest and scoped to your organization; all traffic runs over TLS.                                                                                                               |
| Revoking access    | In Navan, click Edit on the credential and select Revoke — or disconnect from Integrations → Navan here.                                                                                    |

Questions? Contact us at [support@humanintelligence.com](mailto:support@humanintelligence.com).