{"id":"navan_com","version":"1.0","url":"https://navan.com","host":"navan.com","name":"Navan","category":"travel","catalog":{"structured":{"products":0,"withImage":0,"withOffer":0,"withPrice":0,"dated":0},"catalog":null,"feed":null,"verdict":"none","prices":{"text":"is free* — no platform fees Promotional offer Get €450 for vacation | Learn more Get €450 for personal t","served":false},"promo":null},"revenuePath":{"task":"Book a trip","industry":"travel","cta":{"text":"Book my own work tripBook my own work trip","url":null},"steps":[{"id":"find","status":"pass","detail":"“Book my own work tripBook my own work trip” is a link on the home page, readable without scripts."},{"id":"open","status":"fail","detail":"“Book my own work tripBook my own work trip” is a button that runs a script, not a link an agent can follow."},{"id":"fill","status":"skip","detail":"Not reached."},{"id":"finish","status":"skip","detail":"Not reached."}]},"market":{"source":"ChatGPT","model":"gpt-4.1-mini","version":2,"search":true,"askedAt":"2026-11-12T16:50:26.200Z","answer":"Navan offers an AI-powered platform that simplifies business travel and expense management.","products":["Navan Travel","Navan Expense","Navan Payments","Navan Events","Navan Edge"],"lines":[{"name":"Navan Travel","named":true},{"name":"Navan Expense","named":true},{"name":"Navan Payments","named":true},{"name":"Navan Events","named":false},{"name":"Navan Edge","named":true},{"name":"Corporate Cards","named":false},{"name":"Expense Management","named":false},{"name":"Travel Management","named":false},{"name":"AI Travel Agent","named":false}],"estimate":{"value":500000000,"unit":"usd","metric":"online bookings a year","basis":"Navan is a leading AI-powered business travel and expense management platform trusted by thousands of companies, likely generating hundreds of millions in annual bookings based on market size and competitor benchmarks."}},"generatedAt":"2026-11-12T16:50:26.204Z","durationMs":86625,"checks":[{"id":"product_catalog","door":"marketing","title":"Product or service catalog with images","status":"fail","points":0,"maxPoints":3,"finding":"No catalog of products or services with images was found: no feed, no catalog file and no structured data.","evidence":[{"label":"Checked","value":"/products.json, /catalog.json, /feed.xml, /product-feed.xml and others"}],"why":"An agent can only recommend or buy what it can read. A catalog with images lets a shopping agent show what the company sells.","fix":"Publish a product or service feed (JSON or XML) with an image and a price or plan for each item, and add structured data to the pages.","test":"web","gain":5},{"id":"prices_readable","door":"marketing","title":"Prices and rates an agent can read","status":"partial","points":1,"maxPoints":4,"finding":"A price or rate shows on the home page only after scripts run, and is not published as data.","evidence":[{"label":"On the home page","value":"is free* — no platform fees Promotional offer Get €450 for vacation | Learn more Get €450 for personal t"}],"why":"An agent compares on price. A price, a plan or a rate it can read and quote puts the company in the comparison; one it has to guess leaves it out.","fix":"Add Offer markup with the price (or the rate, for loans and accounts) to product pages, and show the price or rate in the page text, not only in images or after scripts run.","test":"web","gain":5},{"id":"offers_readable","door":"marketing","title":"Current offers and promotions an agent can read","status":"fail","points":0,"maxPoints":3,"finding":"No current offer or promotion an agent can read was found on the home page or in structured data.","evidence":[],"why":"Promotions win customers only when the agent knows about them. An offer with its terms and dates can be quoted to a customer who is choosing right now.","fix":"List current offers on one page linked from the home page, and add Offer markup with the terms and the dates each one is valid.","test":"web","gain":5},{"id":"revenue_path","door":"marketing","title":"An agent can start becoming a customer","status":"partial","points":1,"maxPoints":5,"finding":"Book a trip: “Book my own work tripBook my own work trip” is a button that runs a script, not a link an agent can follow.","evidence":[{"label":"Find the link","value":"Passed. “Book my own work tripBook my own work trip” is a link on the home page, readable without scripts."},{"label":"Open the page","value":"Failed. “Book my own work tripBook my own work trip” is a button that runs a script, not a link an agent can follow."}],"why":"The task that makes money (a quote, a new account, a demo) is where an agent either brings a customer in or gives up and tries a competitor.","fix":"Make the call to action a plain link on the home page, keep the form behind it on a page an agent can load, label every field, and keep bot checks off the first step.","test":"web","gain":6.4},{"id":"ai_names_products","door":"marketing","title":"ChatGPT names what you sell","status":"partial","points":1.5,"maxPoints":3,"finding":"ChatGPT names 4 of the 9 product lines on the home page.","evidence":[{"label":"ChatGPT says","value":"Navan offers an AI-powered platform that simplifies business travel and expense management."},{"label":"Named","value":"Navan Travel, Navan Expense, Navan Payments, Navan Edge"},{"label":"Left out","value":"Navan Events, Corporate Cards, Expense Management, Travel Management, AI Travel Assistant"}],"why":"Customers ask ChatGPT what a company offers before they visit. A product the answer leaves out is a product the customer never hears about.","fix":"Describe every product line in plain text on its own page, list them in llms.txt and in structured data, and keep names consistent across the site.","test":"web","gain":2.6},{"id":"robots_assistants","door":"discover","title":"Robots policy for user triggered agents","status":"partial","points":2,"maxPoints":4,"finding":"Some user triggered agents are restricted in robots.txt.","evidence":[{"label":"ChatGPT User","value":"allowed","url":"https://navan.com/robots.txt"},{"label":"Claude User","value":"partly restricted","url":"https://navan.com/robots.txt"},{"label":"Perplexity User","value":"partly restricted","url":"https://navan.com/robots.txt"},{"label":"Gemini Deep Research","value":"partly restricted","url":"https://navan.com/robots.txt"}],"why":"When a customer asks an agent to look something up, it fetches the page as a user triggered agent. A site that blocks those agents cannot be consulted.","fix":"Allow the ChatGPT User, Claude User and Perplexity User agents in robots.txt for public product, pricing and help pages.","test":"web","gain":3.5},{"id":"llms_txt","door":"discover","title":"llms.txt guide for agents","status":"fail","points":0,"maxPoints":3,"finding":"No llms.txt file was found at the site root.","evidence":[{"label":"Checked","value":"/llms.txt and /llms-full.txt"}],"why":"An llms.txt file gives an agent a short map of what you offer and where the authoritative pages are.","fix":"Publish /llms.txt with links to product, pricing, support and location pages.","test":"web","gain":5},{"id":"structured_data","door":"discover","title":"Structured data on the home page","status":"fail","points":0,"maxPoints":3,"finding":"No JSON LD structured data was found on the home page.","evidence":[],"why":"Schema.org markup lets an agent read products, prices and questions as data instead of guessing from the layout.","fix":"Add JSON LD for your organization type, Product or Service, Offer and FAQPage on the pages customers ask about most.","test":"web","gain":5},{"id":"server_rendered","door":"discover","title":"Content available without running scripts","status":"pass","points":3,"maxPoints":3,"finding":"Most of the visible text is in the first HTML response.","evidence":[{"label":"Text in first response","value":"14930 characters"},{"label":"Text after scripts","value":"6624 characters"}],"why":"Many agents read raw HTML and do not run scripts. Text that appears only after scripts run is invisible to them.","fix":"Render product, pricing and help content on the server so the first response contains the text.","test":"web"},{"id":"sitemap_content","door":"discover","title":"Sitemap that includes help and pricing pages","status":"partial","points":1,"maxPoints":2,"finding":"Sitemap is published with 11 entries, but help and pricing pages are not visible in it.","evidence":[{"label":"Sitemap","value":"https://navan.com/sitemap.xml","url":"https://navan.com/sitemap.xml"}],"why":"A sitemap tells an agent where answers live. That cuts wrong guesses and stale pages.","fix":"Publish a sitemap that includes help center, pricing and product pages.","test":"web","gain":1.9},{"id":"mcp_server","door":"connect","title":"MCP server","status":"pass","points":8,"maxPoints":8,"finding":"A live MCP server answers at https://mcp.navan.com/mcp and requires OAuth with published resource metadata.","evidence":[{"label":"Endpoint","value":"https://mcp.navan.com/mcp","url":"https://mcp.navan.com/mcp"}],"why":"An MCP server is the native way for an agent to use your services with the customer's approval. It replaces screen scraping and password sharing.","fix":"Publish a remote MCP server with OAuth. Start with read only tools such as account status, orders or location search, and publish a server card at /.well-known/mcp/server-card.","test":"web"},{"id":"a2a_agent_card","door":"connect","title":"Agent card for agent to agent calls","status":"fail","points":0,"maxPoints":2,"finding":"No agent card was found.","evidence":[],"why":"An agent card lets other agents discover what your own agent can do and how to authenticate.","fix":"Publish /.well-known/agent-card.json describing skills and authentication.","test":"web","gain":1},{"id":"openapi_docs","door":"connect","title":"Public API documentation","status":"partial","points":2,"maxPoints":3,"finding":"A developer portal exists, but no public OpenAPI document was found.","evidence":[{"label":"Developer portal","value":"https://developer.navan.com","url":"https://developer.navan.com"}],"why":"A published OpenAPI document lets developers and agents build against stable, described endpoints.","fix":"Publish an OpenAPI document for customer facing APIs on a developer portal.","test":"web","gain":0.6},{"id":"open_banking","door":"connect","title":"Developer and data sharing program","status":"partial","points":2,"maxPoints":4,"finding":"A developer portal or aggregator connection is mentioned, without a described data sharing program.","evidence":[{"label":"Developer portal","value":"https://developer.navan.com","url":"https://developer.navan.com"}],"why":"A data sharing program with a developer portal and standard APIs gives agents a consented path to customer data. Open banking is the best known example.","fix":"Document the program, the standard in use (for example FDX in US banking), the supported partners and a sandbox.","test":"web","gain":1},{"id":"webmcp_tools","door":"connect","title":"Browser tools exposed to agents","status":"fail","points":0,"maxPoints":3,"finding":"The sign in and home pages register no browser tools for agents.","evidence":[],"why":"WebMCP lets a page register tools that a browser agent can call directly instead of clicking through the interface.","fix":"Register tools for safe tasks such as location search and price lookup with navigator.modelContext.","test":"web","gain":1.5},{"id":"poppy_discovery","door":"connect","title":"Poppy file for personal agents","status":"fail","points":0,"maxPoints":0,"bonus":0,"bonusMax":3,"finding":"No Poppy file was found on this site.","evidence":[{"label":"Address checked","value":"https://navan.com/.well-known/poppy.json","url":"https://navan.com/.well-known/poppy.json"}],"why":"Poppy is an open draft standard from Sierra and Meta. A company publishes one small file that tells a customer's personal agent how to find it, how the customer signs in and which route to use: the company's own agent, an API or the website. Eight launch partners and dozens of design partners back it.","fix":"Publish a poppy.json file in the well known folder of your website. It names your organization, your sign in server and at least one route. Then make your sign in server list your domain in poppy_domains. The standard is a draft, so treat this as early work.","test":"web"},{"id":"oauth_metadata","door":"identity","title":"OAuth and OpenID metadata","status":"pass","points":5,"maxPoints":5,"finding":"Authorization server metadata is published at login.navan.com.","evidence":[{"label":"Issuer","value":"https://login.navan.com/","url":"https://login.navan.com/.well-known/openid-configuration"},{"label":"Grant types","value":"client_credentials, authorization_code, refresh_token, password, implicit"},{"label":"Scopes listed","value":"14"}],"why":"Published authorization server metadata tells a client where to send a customer to approve access.","fix":"Publish /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource for the customer facing APIs.","test":"web"},{"id":"pkce_registration","door":"identity","title":"PKCE and client registration","status":"pass","points":4,"maxPoints":4,"finding":"PKCE with S256 and a registration path for new clients are both published.","evidence":[{"label":"PKCE S256","value":"supported"},{"label":"Dynamic registration","value":"supported"},{"label":"Client ID metadata documents","value":"not listed"}],"why":"PKCE protects the approval step. Dynamic registration or client metadata documents let a new agent onboard without a manual review each time.","fix":"Require PKCE with S256 and support client ID metadata documents or dynamic client registration for approved agent clients.","test":"web"},{"id":"passkeys","door":"identity","title":"Passkeys at sign in","status":"pass","points":4,"maxPoints":4,"finding":"The sign in page makes WebAuthn calls, which indicates passkey support.","evidence":[{"label":"Signal","value":"WebAuthn call observed on login.navan.com: isConditionalMediationAvailable, get (conditional)"},{"label":"Signal","value":"WebAuthn code present on login.navan.com"},{"label":"Signal","value":"Passkey wording on login.navan.com"},{"label":"Signal","value":"Conditional UI autofill hint (autocomplete webauthn)"}],"why":"A passkey lets a customer approve an agent action with a device gesture. It removes the passwords and one time codes that agents cannot handle.","fix":"Offer passkeys with conditional UI on the sign in page and for step up approvals.","test":"login"},{"id":"high_assurance","door":"identity","title":"High assurance authorization profile","status":"partial","points":2,"maxPoints":3,"finding":"Some high assurance features are advertised.","evidence":[{"label":"PAR","value":"no"},{"label":"DPoP","value":"yes"},{"label":"Mutual TLS","value":"no"},{"label":"Rich authorization requests","value":"no"}],"why":"Pushed authorization requests, sender constrained tokens and rich authorization requests let a provider approve one specific action instead of a blanket login.","fix":"Support PAR with DPoP or mutual TLS, and rich authorization requests for payments and account changes.","test":"web","gain":0.3},{"id":"delegate_access","door":"identity","title":"Documented delegate and data sharing controls","status":"fail","points":0,"maxPoints":4,"finding":"No public page on delegate access or connected app controls was found.","evidence":[],"why":"Customers need a place to see and revoke what an agent can do. Organizations need a documented route for authorized agents.","fix":"Publish a help page on delegate access and add a connected apps screen where customers revoke access.","test":"web","gain":0.8},{"id":"declared_agent_homepage","door":"web","title":"Home page for a declared agent","status":"pass","points":3,"maxPoints":3,"finding":"The home page loaded normally for a declared agent.","evidence":[{"label":"Status","value":"200"},{"label":"Response time","value":"202 ms"}],"why":"A declared agent that is challenged or blocked at the first step cannot help the customer at all.","fix":"Allow declared agents through bot management on public pages, and verify them with signed requests.","test":"login"},{"id":"signin_reachable","door":"web","title":"Sign in page loads for a declared agent in a browser","status":"pass","points":4,"maxPoints":4,"finding":"The sign in page loaded in a browser for a declared agent.","evidence":[{"label":"Declared agent","value":"loaded in 10991 ms"},{"label":"Standard browser","value":"loaded in 5016 ms"},{"label":"Page","value":"https://login.navan.com/u/login/identifier?state=hKFo2SBYanJmLUZWNkczLXNlT1ExZzFleG02TnMwdzRYZmU4N6Fur3VuaXZlcnNhbC1sb2dpbqN0aWTZIEVRSHl5MW5vN2NHMXNTU2hFbXNiMXh0VGx3eFE0WHpzo2NpZNkgV2tKOG95eGM5bmtRM2NqOTF4aldINDZ0VFNaOEhuVEw","url":"https://login.navan.com/u/login/identifier?state=hKFo2SBYanJmLUZWNkczLXNlT1ExZzFleG02TnMwdzRYZmU4N6Fur3VuaXZlcnNhbC1sb2dpbqN0aWTZIEVRSHl5MW5vN2NHMXNTU2hFbXNiMXh0VGx3eFE0WHpzo2NpZNkgV2tKOG95eGM5bmtRM2NqOTF4aldINDZ0VFNaOEhuVEw"}],"why":"Where a customer must use the website, a browser agent has to reach the sign in page so it can hand control back to the customer.","fix":"Serve the sign in page to verified agent browsers, and use signed agent identity to separate them from attackers.","test":"login"},{"id":"agent_browser_parity","door":"web","title":"Same behavior for a declared agent and a standard browser","status":"pass","points":2,"maxPoints":2,"finding":"A declared agent and a standard browser got the same result.","evidence":[{"label":"Declared","value":"loaded"},{"label":"Browser","value":"loaded"}],"why":"If a declared agent is treated worse than an anonymous browser, honesty is penalized and agents will hide what they are.","fix":"Do not rank declared agents below anonymous browsers in bot management policy.","test":"login"},{"id":"form_semantics","door":"web","title":"Sign in form structure and autofill hints","status":"partial","points":2,"maxPoints":4,"finding":"50 percent of 2 fields have labels and 50 percent set autocomplete hints.","evidence":[{"label":"text field","value":"Email address; autocomplete: username webauthn"},{"label":"password field","value":"no label; autocomplete: off"}],"why":"Labels and autocomplete hints let an agent and a password manager find the right field and hand over to the customer at the right moment.","fix":"Label every field and set autocomplete values for the username, the current password and the one time code.","test":"login","gain":0.8},{"id":"semantic_markup","door":"web","title":"Semantic page structure","status":"partial","points":1,"maxPoints":2,"finding":"The page structure is only partly readable by agents.","evidence":[{"label":"Landmarks","value":"2"},{"label":"Headings","value":"1"},{"label":"Named controls","value":"100 percent"},{"label":"Images with alt text","value":"100 percent"}],"why":"Landmarks, headings and named controls let an agent read the page the way a screen reader does.","fix":"Use landmark elements, headings in order, accessible names on buttons and alt text on images.","test":"login","gain":0.5},{"id":"terms_stance","door":"policy","title":"Terms on automated access","status":"fail","points":0,"maxPoints":4,"finding":"The terms restrict automated access and name no exception for authorized agents.","evidence":[{"label":"Terms excerpt","value":"…intellectual property, consumer and child protection, obscenity, or defamation). You will not use any robot, spider, scraper, or other automated means to access the Site for any purpose without Navan’s express written permission, nor use the Site in…","url":"https://navan.com/terms-of-use"},{"label":"Terms excerpt","value":"…property, consumer and child protection, obscenity, or defamation). You will not use any robot, spider, scraper, or other automated means to access the Site for any purpose without Navan’s express…","url":"https://navan.com/terms-of-use"}],"why":"Terms that prohibit all automated access with no exception make every agent a violation, even when the customer authorized it.","fix":"Add an exception for authorized agents acting for the customer through approved interfaces.","test":"web","gain":3.8},{"id":"third_party_rules","door":"policy","title":"Third party access and data sharing rules","status":"fail","points":0,"maxPoints":3,"finding":"No third party access rules were found in the documents read.","evidence":[],"why":"Published rules tell customers and developers what is allowed. That keeps agents on approved paths.","fix":"Publish a third party access policy that names the approved interfaces and the consent model.","test":"web","gain":3.1},{"id":"ai_position","door":"policy","title":"Published position on AI agents","status":"partial","points":1,"maxPoints":3,"finding":"AI is mentioned in published documents, but not agents that act for customers.","evidence":[{"label":"Excerpt","value":"…connection with the training of machine learning or a neural network, deep learning or artificial intelligence system or software.7. Warranty DisclaimerNavan has no special relationship with or fiduciary duty to you.…","url":"https://navan.com/terms-of-use"}],"why":"A public position tells customers whether an agent acting for them is welcome, and under what conditions.","fix":"Publish a page that states how customer agents are handled and where to connect them.","test":"web","gain":2.2}],"homeAgentFetch":{"status":200,"ms":202,"bytes":894894,"blocked":false,"thin":false},"login":{"url":"https://login.navan.com/u/login/identifier?state=hKFo2SBYanJmLUZWNkczLXNlT1ExZzFleG02TnMwdzRYZmU4N6Fur3VuaXZlcnNhbC1sb2dpbqN0aWTZIEVRSHl5MW5vN2NHMXNTU2hFbXNiMXh0VGx3eFE0WHpzo2NpZNkgV2tKOG95eGM5bmtRM2NqOTF4aldINDZ0VFNaOEhuVEw","source":"link on home page","validated":true,"candidates":[{"url":"https://navan.com/signin","source":"link on home page"},{"url":"https://navan.com/redirect-to-login/redirect","source":"link on home page"},{"url":"https://app.navan.com/app/user2/","source":"after clicking the sign in control"},{"url":"https://navan.com/login","source":"common path"},{"url":"https://navan.com/sign-in","source":"common path"},{"url":"https://navan.com/online-banking/login","source":"common path"}],"menu":{"clicked":true,"label":"Log In","navigatedTo":"https://app.navan.com/app/user2/","linkCount":0,"hasPasswordField":false},"shots":{"agent":"/data/shots/navan_com_login_agent.jpg","browser":"/data/shots/navan_com_login_browser.jpg","home":"/data/shots/navan_com_home.jpg","menu":"/data/shots/navan_com_login_menu.jpg"},"agent":{"finalUrl":"https://login.navan.com/u/login/identifier?state=hKFo2SBYanJmLUZWNkczLXNlT1ExZzFleG02TnMwdzRYZmU4N6Fur3VuaXZlcnNhbC1sb2dpbqN0aWTZIEVRSHl5MW5vN2NHMXNTU2hFbXNiMXh0VGx3eFE0WHpzo2NpZNkgV2tKOG95eGM5bmtRM2NqOTF4aldINDZ0VFNaOEhuVEw","status":200,"title":"Navan - Sign In","ms":10991,"blocked":false,"blockReason":null,"thin":false,"uaLabel":"declared agent","error":null,"vendors":[{"name":"Cloudflare","evidence":["cookie cf_clearance","cookie __cf_bm","host challenges.cloudflare.com","host brunhild.challenges.cloudflare.com"]}],"textPreview":"Welcome to Navan! Email address Continue Can't log in to your account? or Continue with a passkey Login with Google Login with Apple New to Navan? Get started"},"browser":{"finalUrl":"https://app.navan.com/app/user2/auth/eyJwcmV2aW91c1JvdXRlIjoiL2FwcC91c2VyMi8ifQ==","status":200,"title":"Navan","ms":5016,"blocked":false,"blockReason":null,"thin":true,"uaLabel":"browser","error":null,"vendors":[{"name":"Cloudflare","evidence":["cookie cf_clearance","cookie __cf_bm","header cf-ray","header server"]}],"textPreview":""},"botDefense":[{"name":"Cloudflare","evidence":["cookie cf_clearance","cookie __cf_bm","host challenges.cloudflare.com","host brunhild.challenges.cloudflare.com"]}],"passkeys":{"found":true,"runtimeObserved":true,"evidence":["WebAuthn call observed on login.navan.com: isConditionalMediationAvailable, get (conditional)","WebAuthn code present on login.navan.com","Passkey wording on login.navan.com","Conditional UI autofill hint (autocomplete webauthn)"]},"fields":[{"type":"text","label":"Email address","autocomplete":"username webauthn","name":"username"},{"type":"password","label":"","autocomplete":"off","name":""}]},"protocols":{"mcp":{"cards":[],"endpoints":[{"url":"https://mcp.navan.com/mcp","getStatus":405,"contentType":"text/plain; charset=utf-8","confirmed":true,"authRequired":true,"challenge":{"raw":"Bearer error=\"invalid_token\", resource_metadata=\"https://mcp.navan.com/.well-known/oauth-protected-resource\"","resourceMetadata":"https://mcp.navan.com/.well-known/oauth-protected-resource","scheme":"bearer"},"resourceMetadata":"https://mcp.navan.com/.well-known/oauth-protected-resource","resource":{"url":"https://mcp.navan.com/.well-known/oauth-protected-resource","resource":"https://mcp.navan.com/mcp","authorizationServers":["https://login.navan.com/"],"scopes":[],"bearerMethods":[]},"tools":null},{"url":"https://api.navan.com/mcp","getStatus":500,"contentType":"text/event-stream","confirmed":true,"authRequired":false,"note":"event stream endpoint","tools":null}],"resources":[{"url":"https://mcp.navan.com/.well-known/oauth-protected-resource","resource":"https://mcp.navan.com/mcp","authorizationServers":["https://login.navan.com/"],"scopes":[],"bearerMethods":[]}],"registry":{"checked":true,"matches":[]},"mentions":[{"url":"https://navan.com/privacy","snippet":"ing credit limits and managing financial risk.Third-Party AI Assistants and the Model Context Protocol (MCP)Navan Services may support integration with external, third-party artificial intelligence assistants, local app…"},{"url":"https://developer.navan.com","snippet":"Programmatic access to travel and expense data and AI-assistant access via the Model Context Protocol — for partners, integrators, and internal tools. Navan MCP Connect AI assistants — Claude, Cursor, ChatGPT, Codex, Op…"}],"found":true,"live":true,"protectedByOAuth":true,"registryListed":false,"checkedBases":5},"a2a":{"found":false},"aiPlugin":{"found":false},"agentsJson":{"found":false},"openapi":{"found":false},"poppy":{"found":false,"blocked":false,"unreachable":false,"tried":[{"host":"navan.com","status":404}],"url":"https://navan.com/.well-known/poppy.json"},"llms":{"llmsTxt":{"found":false,"status":404,"url":"https://navan.com/llms.txt","bytes":204576,"links":0,"preview":null},"llmsFull":{"found":false,"status":404,"url":"https://navan.com/llms-full.txt","bytes":204576,"links":0,"preview":null}},"robots":{"found":true,"status":200,"url":"https://navan.com/robots.txt","bytes":1586,"sitemaps":["https://navan.com/sitemap.xml","https://navan.com/blog-sitemap.xml","https://navan.com/pages-sitemap.xml","https://navan.com/case-study-sitemap.xml","https://navan.com/ebook-sitemap.xml","https://navan.com/report-sitemap.xml","https://navan.com/glossary-sitemap.xml","https://navan.com/calculators-sitemap.xml","https://navan.com/website-pages-sitemap.xml","https://navan.com/web-pages-sitemap.xml","https://navan.com/hotel-choices-sitemap.xml"],"managedAI":false,"agents":[{"agent":"ChatGPT-User","vendor":"OpenAI","kind":"assistant","allowed":true,"rule":"explicitly allowed","via":"ChatGPT-User"},{"agent":"Claude-User","vendor":"Anthropic","kind":"assistant","allowed":"partial","rule":"16 disallowed paths","via":"*"},{"agent":"Perplexity-User","vendor":"Perplexity","kind":"assistant","allowed":"partial","rule":"16 disallowed paths","via":"*"},{"agent":"Gemini-Deep-Research","vendor":"Google","kind":"assistant","allowed":"partial","rule":"16 disallowed paths","via":"*"},{"agent":"GPTBot","vendor":"OpenAI","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"GPTBot"},{"agent":"ClaudeBot","vendor":"Anthropic","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"ClaudeBot"},{"agent":"OAI-SearchBot","vendor":"OpenAI","kind":"search","allowed":true,"rule":"explicitly allowed","via":"OAI-SearchBot"},{"agent":"PerplexityBot","vendor":"Perplexity","kind":"search","allowed":true,"rule":"explicitly allowed","via":"PerplexityBot"},{"agent":"Google-Extended","vendor":"Google","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"Google-Extended"},{"agent":"Applebot-Extended","vendor":"Apple","kind":"crawler","allowed":true,"rule":"explicitly allowed","via":"Applebot-Extended"},{"agent":"CCBot","vendor":"Common Crawl","kind":"crawler","allowed":"partial","rule":"16 disallowed paths","via":"*"},{"agent":"Bytespider","vendor":"ByteDance","kind":"crawler","allowed":"partial","rule":"16 disallowed paths","via":"*"}],"assistantsBlocked":[],"assistantsAllowed":["ChatGPT-User"],"crawlersBlocked":[],"error":null},"sitemap":{"found":true,"url":"https://navan.com/sitemap.xml","entries":11,"isIndex":true,"hasHelp":false,"hasRates":false,"hasProducts":false},"webmcp":{"found":false,"tools":[],"declarativeForms":0,"markupHint":false},"structuredData":[]},"identity":{"found":true,"servers":[{"issuer":"https://login.navan.com/","url":"https://login.navan.com/.well-known/openid-configuration","host":"login.navan.com","s256":true,"pkceMethods":["S256","plain"],"dcr":true,"cimd":false,"par":false,"parRequired":false,"dpop":true,"mtls":false,"rar":false,"privateKeyJwt":true,"grantTypes":["client_credentials","authorization_code","refresh_token","password","implicit","urn:ietf:params:oauth:grant-type:device_code","urn:ietf:params:oauth:grant-type:token-exchange","http://auth0.com/oauth/grant-type/password-realm","http://auth0.com/oauth/grant-type/passwordless/otp","http://auth0.com/oauth/grant-type/mfa-oob","http://auth0.com/oauth/grant-type/mfa-otp","http://auth0.com/oauth/grant-type/mfa-recovery-code","urn:ietf:params:oauth:grant-type:jwt-bearer"],"scopes":["openid","profile","offline_access","name","given_name","family_name","nickname","email","email_verified","picture","created_at","identities","phone","address"],"acrValues":[],"deviceFlow":true,"tokenExchange":true,"clientCredentials":true,"fapiLike":false}],"checkedHosts":15,"answeredHosts":8,"silentHosts":["sso.navan.com","id.navan.com","signin.navan.com","online.navan.com","accounts.navan.com","digital.navan.com","connect.navan.com"]},"openBanking":{"pages":[{"url":"https://developer.navan.com","source":"common subdomain","title":"Navan Developers","terms":["oauth"],"aggregators":[],"excerpt":"Skip to content Build with Navan. Programmatic access to travel and expense data and AI-assistant access via the Model Context Protocol — for partners, integrators, and internal tools. Navan MCP Conn…"}],"portal":{"url":"https://developer.navan.com","title":"Navan Developers"},"fdx":false,"rule1033":false,"openBanking":false,"sandbox":false,"oauth":true,"dataAccessAgreement":false,"aggregators":[],"found":false},"policy":{"stance":"prohibits","documentsRead":4,"termsRead":2,"prohibits":[{"type":"prohibitsAutomation","label":"Restricts automated access","excerpt":"…intellectual property, consumer and child protection, obscenity, or defamation). You will not use any robot, spider, scraper, or other automated means to access the Site for any purpose without Navan’s express written permission, nor use the Site in…","url":"https://navan.com/terms-of-use","title":"Website Terms of Use"},{"type":"prohibitsAutomation","label":"Restricts automated access","excerpt":"…property, consumer and child protection, obscenity, or defamation). You will not use any robot, spider, scraper, or other automated means to access the Site for any purpose without Navan’s express…","url":"https://navan.com/terms-of-use","title":"Website Terms of Use"}],"delegation":[],"thirdParty":[],"dataSharing":[],"ai":[{"type":"ai","label":"Mentions AI or agents","excerpt":"…connection with the training of machine learning or a neural network, deep learning or artificial intelligence system or software.7. Warranty DisclaimerNavan has no special relationship with or fiduciary duty to you.…","url":"https://navan.com/terms-of-use","title":"Website Terms of Use"},{"type":"ai","label":"Mentions AI or agents","excerpt":"…to provide, develop, and improve our Website and Services (including our chatbox and virtual assistant), develop new products and services, enhance, modify, and maintain our current products and Services, as…","url":"https://navan.com/privacy","title":"Privacy"}],"credentialSharing":[],"documents":[{"url":"https://navan.com/terms-of-use","title":"Website Terms of Use","status":200,"textLength":17587,"blockedForAgent":false,"flags":["Restricts automated access","Restricts automated access","Mentions AI or agents"]},{"url":"https://navan.com/terms/modern-slavery-statement","title":"Modern Slavery Statement","status":200,"textLength":6096,"blockedForAgent":false,"flags":[]},{"url":"https://navan.com/security","title":"","status":200,"textLength":5656,"blockedForAgent":false,"flags":[]},{"url":"https://navan.com/privacy","title":"Privacy","status":200,"textLength":47574,"blockedForAgent":false,"flags":["Mentions AI or agents"]}]},"delegates":[],"voice":{"phone":{"e164":"+14117633423","pretty":"+1 411 763 3423","score":2,"context":"eadquarters)260 California Ave., Floor 2Palo Alto, CA 94306United StatesGet DirectionsAmsterdamStrawinskylaan 4117Office 04-1011077 ZX AmsterdamNetherlandsGet DirectionsAustin501 C","source":"https://navan.com/contact","tollFree":false,"seen":1,"kind":"unclassified"},"candidates":[{"e164":"+14117633423","pretty":"+1 411 763 3423","score":2,"context":"eadquarters)260 California Ave., Floor 2Palo Alto, CA 94306United StatesGet DirectionsAmsterdamStrawinskylaan 4117Office 04-1011077 ZX AmsterdamNetherlandsGet DirectionsAustin501 C","source":"https://navan.com/contact","tollFree":false,"seen":1,"kind":"unclassified"},{"e164":"+15252677355","pretty":"+1 525 267 7355","score":2,"context":"Boston77 Sleeper StreetSuite 02-135Boston, MA 02210United StatesGet DirectionsDallas3401 Olympus Blvd., Suite 525Coppell, TX 75019United StatesGet DirectionsDelhiWeWork Eldeco Cent","source":"https://navan.com/contact","tollFree":false,"seen":1,"kind":"unclassified"},{"e164":"+18775363343","pretty":"+1 877 536 3343","score":0,"context":"agents are available 24/7 by chat in English, German, French, Italian, and Spanish, or by phone in English at +1-877-536-3343. Agents can help with disruptions and special request…","source":"https://navan.com/product/navan-edge","tollFree":true,"seen":1,"kind":"specialty"}],"status":"failed","calls":[{"testId":"V01","name":"Greeting and menu","group":"Reach and understand","timing":"business","objective":"Listen to the whole greeting and the complete main menu without pressing anything. Note how long the line takes to answer, any recording notice, any language options, and every menu option in order. If the menu repeats, note it and end the call.","status":"error","startedAt":"2026-11-05T16:00:48.614Z","placedLocal":"Thursday 11:00 AM Eastern time","error":"Retell POST /v2/create-phone-call failed with 400: The number provided: +14117633423 is not a valid number. Please provide a valid number in e.164 format."},{"testId":"V02","name":"Plain request","group":"Reach and understand","timing":"business","objective":"When asked how to help, say clearly: \"I need help with my account.\" Do not provide any account details. Note whether the system understands, how many times it reprompts, and where it sends you. End the call at the first authentication prompt.","status":"error","startedAt":"2026-11-05T16:00:49.118Z","placedLocal":"Thursday 11:00 AM Eastern time","error":"Retell POST /v2/create-phone-call failed with 400: The number provided: +14117633423 is not a valid number. Please provide a valid number in e.164 format."}],"aggregate":{"timings":{"business":{"completed":0,"total":5,"points":0,"max":0,"score":null,"verdict":null},"after_hours":{"completed":0,"total":1,"points":0,"max":0,"score":null,"verdict":null}},"completed":0,"total":6,"points":0,"max":0,"score":null,"groups":[{"group":"Reach and understand","score":null,"completed":0,"total":2},{"group":"Treat an assistant","score":null,"completed":0,"total":2},{"group":"People and identity","score":null,"completed":0,"total":2}],"verdicts":{"pass":0,"partial":0,"fail":0},"medianSecondsToHuman":null,"totalMinutes":0,"biometricsRequired":false,"authorizedAgentPath":"not_tested"},"startedAt":"2026-11-05T15:42:51.073Z","finishedAt":"2026-11-05T16:00:49.269Z","progress":{"done":2,"total":6},"note":"None of the calls connected. See the error on each test."},"timeline":[{"step":"identify","label":"Identify the organization and load the home page","ms":20580,"ok":true},{"step":"robots","label":"Read robots rules for agents, llms.txt and sitemaps","ms":1692,"ok":true},{"step":"cards","label":"Look for agent cards, Poppy files, OpenAPI documents and browser tools","ms":6937,"ok":true},{"step":"links","label":"Map sign in, terms, help and developer pages","ms":0,"ok":true},{"step":"login_agent","label":"Load the sign in page as a declared agent","ms":13654,"ok":true},{"step":"login_browser","label":"Load the sign in page as a standard browser","ms":6176,"ok":true},{"step":"openbanking","label":"Check developer portals and data sharing programs","ms":472,"ok":true},{"step":"policy","label":"Read terms for automated access and delegation","ms":8004,"ok":true},{"step":"mcp","label":"Probe for MCP servers and check the official registry","ms":10678,"ok":true},{"step":"identity","label":"Discover OAuth and OpenID metadata","ms":3763,"ok":true},{"step":"phones","label":"Find published customer service phone numbers","ms":965,"ok":true}],"previous":{"generatedAt":"2026-11-05T15:42:51.060Z","score":72,"level":3},"history":[{"at":"2026-11-05T15:42:51.060Z","score":72,"level":3,"levelName":"Connectable","cal":3,"doors":{"discover":64,"connect":84,"identity":94,"web":96,"policy":19,"marketing":0},"pts":{"product_catalog":0,"robots_assistants":2,"llms_txt":0,"structured_data":0,"server_rendered":3,"sitemap_content":1,"mcp_server":8,"a2a_agent_card":0,"openapi_docs":2,"open_banking":2,"webmcp_tools":0,"poppy_discovery":0,"oauth_metadata":5,"pkce_registration":4,"passkeys":4,"high_assurance":2,"delegate_access":0,"declared_agent_homepage":3,"signin_reachable":4,"agent_browser_parity":2,"form_semantics":2,"semantic_markup":1,"terms_stance":0,"third_party_rules":0,"ai_position":1}},{"at":"2026-11-12T16:50:26.204Z","score":78,"level":3,"levelName":"Connectable","cal":3,"doors":{"discover":64,"connect":84,"identity":94,"web":96,"policy":19,"marketing":35},"pts":{"product_catalog":0,"prices_readable":1,"offers_readable":0,"revenue_path":1,"ai_names_products":1.5,"robots_assistants":2,"llms_txt":0,"structured_data":0,"server_rendered":3,"sitemap_content":1,"mcp_server":8,"a2a_agent_card":0,"openapi_docs":2,"open_banking":2,"webmcp_tools":0,"poppy_discovery":0,"oauth_metadata":5,"pkce_registration":4,"passkeys":4,"high_assurance":2,"delegate_access":0,"declared_agent_homepage":3,"signin_reachable":4,"agent_browser_parity":2,"form_semantics":2,"semantic_markup":1,"terms_stance":0,"third_party_rules":0,"ai_position":1}}],"brand":{"src":"/data/logos/navan_com.png?v=516577b3","kind":"wordmark","invert":false,"tile":false,"w":360,"h":80,"source":"page logo","from":"data:image/svg+xml;utf8,%3Csvg%20width%3D%2290%22%20height%3D%2220%22%20viewBox%3D%220%200%201026%20231%22%20fill%3D%22none%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20xmlns%3Axlink%3D%22http%3A%2F%2Fwww.w3.org%2F1999%2Fxlink%22%20style%3D%22color%3Argb(6%2C%200%2C%200)%3B%22%3E%3Ctitle%3ENavan%20-%20Business%20Travel%20Solutions%20%26amp%3B%20Expense%20Management%3C%2Ftitle%3E%3Cg%20clip-path%3D%22url(%23a)%22%20fill%3D%22black%22%3E%3Cpath%20d%3D%22M197.1%20227.2h-46.7c-2.6-149.1-9-185.6-29.4-185.6-27.9%200-52.5%2084.2-79.4%20185.6H0V3.2h45.8v102.4C65.3%2044.8%2088.3%200%20127.7%200c57%200%2066.5%2069.8%2069.4%20227.2ZM426.9%20227.2h-42.6c-42.5-39.7-80.6-70.4-104.3-70.4-10.2%200-16.3%206-18.9%2018.3L250%20227.2h-34.5C241.9%20120%20256%200%20321.3%200c65.3%200%2079.3%20119.7%20105.6%20227.2Zm-154-103c2.6-.4%205.5-.7%208.4-.7%2026.2%200%2054.7%2018%2084.8%2042.6-17-76.8-31-124.5-50.9-124.5-16.6%200-29.4%2031.7-42.2%2082.6ZM408.6%203.2H456c22.4%20105%2038%20185.6%2062%20185.6S559.8%20105%20581.5%203.2H616c-26.6%20107.2-40.3%20227.2-103.7%20227.2-63.3%200-77.4-120-103.7-227.2ZM809%20227.2h-42.6c-42.6-39.7-80.6-70.4-104.3-70.4-10.3%200-16.3%206-18.9%2018.3L632%20227.2h-34.6C624%20120%20638.1%200%20703.4%200S782.7%20119.7%20809%20227.2Zm-154-103c2.6-.4%205.5-.7%208.4-.7%2026.2%200%2054.7%2018%2084.8%2042.6-17-76.8-31-124.5-51-124.5-16.6%200-29.4%2031.7-42.2%2082.6ZM1025.3%20227.2h-46.8c-2.5-149.1-9-185.6-29.4-185.6-27.8%200-52.5%2084.2-79.4%20185.6h-41.6V3.2H874v102.4C893.4%2044.8%20916.5%200%20956%200c56.9%200%2066.5%2069.8%2069.4%20227.2Z%22%3E%3C%2Fpath%3E%3C%2Fg%3E%3Cdefs%3E%3CclipPath%20id%3D%22a%22%3E%3Cpath%20fill%3D%22%23fff%22%20d%3D%22M0%200h1025.3v230.4H0z%22%3E%3C%2Fpath%3E%3C%2FclipPath%3E%3C%2Fdefs%3E%3C%2Fsvg%3E","crisp":true,"v":2},"summary":{"score":78,"composite":69.3,"gates":[],"measuredWeight":92,"provisional":true,"calibration":3,"level":{"id":3,"name":"Connectable","summary":"An agent can connect through an MCP server or a public API program.","nextLevel":{"id":4,"name":"Trusted","need":"Let customers authorize agents: OAuth with PKCE, a registration path and documented delegate controls."}},"doors":[{"id":"discover","name":"Discoverability","weight":22,"measured":true,"score":64,"raw":40,"points":14.1},{"id":"connect","name":"Protocol access","weight":14,"measured":true,"score":84,"raw":60,"points":11.8},{"id":"identity","name":"Identity and delegation","weight":12,"measured":true,"score":94,"raw":75,"points":11.3},{"id":"web","name":"Web experience","weight":20,"measured":true,"score":96,"raw":80,"points":19.2},{"id":"voice","name":"Voice and IVR","weight":8,"measured":false,"score":null,"points":0,"completed":0,"total":6},{"id":"policy","name":"Policy and governance","weight":6,"measured":true,"score":19,"raw":10,"points":1.1},{"id":"marketing","name":"Marketing readiness","weight":18,"measured":true,"score":35,"raw":19,"points":6.3}],"strengths":["MCP server","OAuth and OpenID metadata","PKCE and client registration"],"gaps":[{"id":"revenue_path","title":"An agent can start becoming a customer","lost":6.4},{"id":"product_catalog","title":"Product or service catalog with images","lost":5},{"id":"prices_readable","title":"Prices and rates an agent can read","lost":5},{"id":"offers_readable","title":"Current offers and promotions an agent can read","lost":5}],"gainAll":22,"headline":"Navan reaches level 3, Connectable. Web experience is the strongest area at 96 out of 100. Policy and governance is the weakest at 19."},"assistantDay":[{"id":"balance","job":"Check my booking","outcome":"works","steps":[{"status":"ok","text":"MCP server: the agent connects and the customer approves access with OAuth."},{"status":"partial","text":"Website: the agent reaches the sign in page, and the terms restrict automated access.","detail":"The terms restrict automated access and name no exception for authorized agents."},{"status":"untested","text":"Phone line: not tested yet."}]},{"id":"dispute","job":"Dispute a charge","outcome":"partial","steps":[{"status":"partial","text":"MCP server: reachable, with tool coverage for this action not published.","detail":"Tools sit behind sign in, so the scan cannot confirm that write actions exist."},{"status":"partial","text":"Website: the agent reaches the sign in page, and the terms restrict automated access.","detail":"The terms restrict automated access and name no exception for authorized agents."},{"status":"untested","text":"Phone line: not tested yet."}]},{"id":"rates","job":"Find the best fare","outcome":"works","steps":[{"status":"ok","text":"Website: pricing and product pages are readable by agents without signing in."},{"status":"untested","text":"Phone line: not tested yet."}]},{"id":"human","job":"Get me to a person","outcome":"untested","steps":[{"status":"untested","text":"Phone line: not tested yet."}]}]}