Agent skill · software engineering · jeremylongshore
navan-webhooks-events
Validate and operate the event or change-delivery mechanism actually enabled for a Navan tenant. Use when evaluating callbacks, API polling, files, or direct integrations. Trigger with "Navan events", "Navan webhook", or "real-time Navan sync".
Why this skill is useful
Adds executable scripts for setting up and handling Navan webhooks, including payload verification and event processing that aren't in public docs.
What it needs
Requires node installed locally. Requires navan account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Navan Event Delivery Contract Verification Overview Validate and operate the event or change-delivery mechanism actually enabled for a Navan tenant. This workflow produces an auditable decision or artifact before any live action. Prerequisites Access to the selected tenant's current Navan Help Center and contracted integration documentation. A named business owner and data owner for the travel or expense workflow. A non-production evidence set with secrets and traveler data removed. Current Contract Navan's public pages confirm APIs, SFTP, and direct integrations but do not establish a universal webhook endpoint, event taxonomy, or signature header. Use only the tenant's documented delivery mode and keep polling or reconciliation as a recovery path. Authentication For callbacks, use the documented verification scheme and secret lifecycle; for polling or files, use the corresponding read-only identity. Never invent a generic vendor-signature header. Instructions 1. Confirm whether the tenant surface supports callback, poll, file, or managed delivery. 2. Capture event or record identifiers, ordering, duplication, correction, and replay semantics. 3. Authenticate before parsing and enforce body or file size limits. 4. Journal receipt before acknowledgement and deduplicate durably. 5. Process idempotently with quarantine for unknown types or schemas. 6. Reconcile periodically against the source-of-record contract. Tool Discipline Use Read, Glob, and Grep to inspect documentation, schemas, configuration, code, fixtures, and evidence. Use Write and Edit only for approved repository artifacts. Invocation alone does not authorize network access, credentials, traveler or expense data, bookings, payments, policy or identity changes, file transfers, deployments, or deletion. Approval Boundaries Registering destinations, issuing verification secrets, enabling new event classes, replaying deliveries, or applying state changes requires explicit approval. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/navan-webhooks-events--be1da0