Navan Deploy Integration

Overview

Deploy Navan-powered applications to popular platforms with proper secrets management.

Prerequisites

• Navan API keys for production environment
• Platform CLI installed (vercel, fly, or gcloud)
• Application code ready for deployment
• Environment variables documented

Vercel Deployment

Environment Setup

# Add Navan secrets to Vercel
vercel secrets add navan_api_key sk_live_***
vercel secrets add navan_webhook_secret whsec_***

# Link to project
vercel link

# Deploy preview
vercel

# Deploy production
vercel --prod

vercel.json Configuration

{
  "env": {
    "NAVAN_API_KEY": "@navan_api_key"
  },
  "functions": {
    "api/**/*.ts": {
      "maxDuration": 30
    }
  }
}

Fly.io Deployment

fly.toml

app = "my-navan-app"
primary_region = "iad"

[env]
  NODE_ENV = "production"

[http_service]
  internal_port = 3000
  force_https = true
  auto_stop_machines = true
  auto_start_machines = true

Secrets

# Set Navan secrets
fly secrets set NAVAN_API_KEY=sk_live_***
fly secrets set NAVAN_WEBHOOK_SECRET=whsec_***

# Deploy
fly deploy

Google Cloud Run

Dockerfile

FROM node:20-slim
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
CMD ["npm", "start"]

Deploy Script

#!/bin/bash
# deploy-cloud-run.sh

PROJECT_ID="${GOOGLE_CLOUD_PROJECT}"
SERVICE_NAME="navan-service"
REGION="us-central1"

# Build and push image
gcloud builds submit --tag gcr.io/$PROJECT_ID/$SERVICE_NAME

# Deploy to Cloud Run
gcloud run deploy $SERVICE_NAME \
  --image gcr.io/$PROJECT_ID/$SERVICE_NAME \
  --region $REGION \
  --platform managed \
  --allow-unauthenticated \
  --set-secrets=NAVAN_API_KEY=navan-api-key:latest

Environment Configuration Pattern

// config/navan.ts
interface NavanConfig {
  apiKey: string;
  environment: 'development' | 'staging' | 'production';
  webhookSecret?: string;
}

export function getNavanConfig(): NavanConfig {
  const env = process.env.NODE_ENV || 'development';

  return {
    apiKey: process.env.NAVAN_API_KEY!,
    environment: env as NavanConfig['environment'],
    webhookSecret: process.env.NAVAN_WEBHOOK_SECRET,
  };
}

Health Check Endpoint

// api/health.ts
export async function GET() {
  const navanStatus = await checkNavanConnection();

  return Response.json({
    status: navanStatus ? 'healthy' : 'degraded',
    services: {
      navan: navanStatus,
    },
    timestamp: new Date().toISOString(),
  });
}

Instructions

Step 1: Choose Deployment Platform

Select the platform that best fits your infrastructure needs and follow the platform-specific guide below.

Step 2: Configure Secrets

Store Navan API keys securely using the platform's secrets management.

Step 3: Deploy Application

Use the platform CLI to deploy your application with Navan integration.

Step 4: Verify Health

Test the health check endpoint to confirm Navan connectivity.

Output

• Application deployed to production
• Navan secrets securely configured
• Health check endpoint functional
• Environment-specific configuration in place

Error Handling

Examples

Quick Deploy Script

#!/bin/bash
# Platform-agnostic deploy helper
case "$1" in
  vercel)
    vercel secrets add navan_api_key "$NAVAN_API_KEY"
    vercel --prod
    ;;
  fly)
    fly secrets set NAVAN_API_KEY="$NAVAN_API_KEY"
    fly deploy
    ;;
esac

Resources

• Vercel Documentation
• Fly.io Documentation
• Cloud Run Documentation
• Navan Deploy Guide

Next Steps

For webhook handling, see navan-webhooks-events.