Navan · OAuth Scopes

Navan OAuth Scopes

OAuth 2.0 derived

Navan publishes 6 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Navan API on a user’s behalf.

Tokens are issued from https://app.navan.com/ta-auth/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Corporate TravelExpense ManagementCorporate CardsSpend ManagementT&EFintechBusiness Travel

Scopes: 6 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
https://app.navan.com/ta-auth/oauth/token

Flows
clientCredentials

Scopes (6)

Scope	Description	Flows
bookings:read	Read booking (trip) data.	clientCredentials
liquid:read	Read expense data (transactions, fees, receipts, custom fields).	clientCredentials
liquid:write	Update expense data.	clientCredentials
users:delete	Deactivate users.	clientCredentials
users:read	Read user profiles.	clientCredentials
users:write	Create and modify users.	clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/navan-openapi.yml
schemes:
- name: oauth2ClientCredentials
  source: openapi/navan-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://app.navan.com/ta-auth/oauth/token
  description: 'OAuth 2.0 client-credentials flow. Generate a client_id / client_secret in the
    Navan app under Settings > Integrations (API), then POST grant_type=client_credentials to
    the token URL to obtain a Bearer access token. US token URL: https://app.navan.com/ta-auth/oauth/token
    ; EU token URL: https://app-fra.navan.com/ta-auth/oauth/token . (Some integrations reference
    an https://api.navan.com/ta-auth/oauth/token or /auth/v1/token variant; confirm the current
    token URL in the Navan developer portal.)'
scopes:
- scope: bookings:read
  description: Read booking (trip) data.
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml
- scope: liquid:read
  description: Read expense data (transactions, fees, receipts, custom fields).
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml
- scope: liquid:write
  description: Update expense data.
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml
- scope: users:delete
  description: Deactivate users.
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml
- scope: users:read
  description: Read user profiles.
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml
- scope: users:write
  description: Create and modify users.
  flows:
  - clientCredentials
  sources:
  - openapi/navan-openapi.yml