navan.com agentic web readiness
B Manifest validity: 100% (1/1 valid, 0 errors, 2 warnings) · Surface score 30 (coverage 20 + breadth 0 + conformance 10). 2 standards observed across 2 of 9 steps; 1 manifest present, 0 errors, 2 warnings. Checked 2026-10-25 03:15:54 UTC. This grades the agent-facing files published at navan.com, not the organisation's products.
Coverage by step
Manifests
| Manifest | Result | Findings |
|---|---|---|
Agentic Resource Discovery/.well-known/ard.json | absent HTTP 404 | |
AI Catalog well-known file/.well-known/ai-catalog.json | absent HTTP 404 | |
MCP Server Cards (SEP-2127)/mcp/server-card | absent HTTP 404 | |
Agent2Agent Protocol/.well-known/agent-card.json | absent HTTP 404 | |
llms.txt/llms.txt | absent HTTP 404 | |
AGENTS.md/AGENTS.md | absent HTTP 404 | |
Agent Skills/.well-known/agent-skills/index.json | absent HTTP 404 | |
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs/.well-known/api-catalog | absent HTTP 404 | |
AI Crawler User-Agent Tokens in robots.txt/robots.txt | valid |
|
security.txt (RFC 9116)/.well-known/security.txt | absent HTTP 404 | |
auth.md/auth.md | absent HTTP 404 | |
Open Knowledge Format/okf/index.md | absent HTTP 404 |
What an agent can call
- robots.txt AI policy: allows GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-Web, Google-Extended, PerplexityBot, Applebot-Extended; unlisted crawlers partial
Standards observed
- AI Crawler User-Agent Tokens in robots.txt https://navan.com/robots.txt
- Markdown for Agents https://navan.com/
Cheapest next steps
- llms.txt: one Markdown index file; the most widely read agent-facing file
Generate starter
/llms.txtfor navan.com# Navan > Navan and what it offers to agents Short notes an agent should know before using the site: what it is for, who runs it, how to cite it. ## Docs - [Getting started](https://navan.com/docs/getting-started): the first page to read - [API reference](https://navan.com/openapi.json): OpenAPI description ## Optional - [Changelog](https://navan.com/changelog): what changed, newest first
- Agentic Resource Discovery: a catalog at /.well-known/ard.json lets agents discover your APIs, MCP servers and data in one fetch
- AGENTS.md: instructions for coding agents working on or with the site
Generate starter
/AGENTS.mdfor navan.com# Navan for agents Navan and what it offers to agents ## Read the data, not the HTML - Index: https://navan.com/llms.txt - API description: https://navan.com/openapi.json - Discovery catalog: https://navan.com/.well-known/ard.json ## Calling - MCP server (Streamable HTTP): https://navan.com/mcp - Rate limits and authentication: describe them here ## Conventions - How to cite or attribute content - What not to do (no scraping of /account/, no automated sign-ups, etc.) Contact: security@navan.com
Agent pre-flight & practical readiness
Preferred mode: markdown_negotiation. GET / with Accept: text/markdown. The origin already serves a Markdown body for agents. navan.com publishes no root agent discovery manifests, but docs.navan.com serves /llms.txt (14 links). Probe docs.navan.com or publish /.well-known/ard.json on navan.com to link them.
Fetch: GET https://navan.com/ GET / with Accept: text/markdown. The origin negotiates a Markdown body.
Subdomain discovery hint (subdomain_stranded): navan.com publishes no root agent discovery manifests, but docs.navan.com serves /llms.txt (14 links). Probe docs.navan.com or publish /.well-known/ard.json on navan.com to link them. (check docs.navan.com)
Practical readability: exa_parsable yes, markdown negotiation yes, render markdown_native, HTML quality high, first content at byte 0.
AI crawler posture: open_to_all · Assistant access: OpenAI allowed, Anthropic allowed, Google allowed, Perplexity allowed, Exa allowed.
Readiness subscores: reach 20/20, readability 30/30, capabilities 2/35, conformance 10/15, total 62/100, grade B.
How the grade is made
+10 per lifecycle step with a standard observed, counting manifests that validate or that the probe rule for the standard recognises (a valid MCP server card counts for MCP; max 90); +3 per observed standard beyond the first two (max 15); conformance +15 (+10 with one manifest) minus 5 per agent-facing manifest with errors, never below 0 (security.txt is reported, not scored). Lifecycle grade: A+ >= 60, A >= 45, B >= 30, C >= 20, D >= 10. Strict 100-point composite (subscores.total_100 / subscores.grade_100): reach_and_policy (20) + readability (30) + capabilities (35) + conformance (15), where A+ >= 80, A >= 65, B >= 45, C >= 28, D >= 15. Errors are specification violations; warnings are best-practice gaps. Only public paths are fetched, without credentials, so standards that need a login (skipped in the probe) are not counted either way. The same report is the validate_manifest tool on the MCP server.
JSON · Markdown · probe rules