# Connector: JSON API list (`jsonlist`)
**Purpose**: keyed records from official JSON APIs. Used for CISA KEV, NVD CVE 2.0 (`{now-3h}` window),
Federal Register documents (rules, proposed rules, presidential documents), ClinicalTrials.gov v2, USGS
significant earthquakes (GeoJSON), Have I Been Pwned breaches, MSRC security updates, Google Cloud / Firebase /
Workspace incidents, NOAA SWPC alerts, Salesforce Trust incidents.
**Config**: `itemsPath` (dot path to the array, `""` for a root array), `keyField`, `titleField` or
`titleTemplate` (`{a.b}` placeholders), `urlField`/`urlTemplate` (`{key}`), `summaryField` (arrays and
`{lang,value}` description lists are flattened), `dateField`, `compareFields`, `maxItems`, `headers`,
`noConditional` (for windowed queries), `timeoutMs`. URL placeholders `{now}`, `{now-2h}`, `{now-30d}`.
**Rate limits**: NVD 5 req/30 s without key (sensor interval 15 min); Federal Register 1000/h; ClinicalTrials
none documented; KEV is a static file (~1.7 MB, ETag).
**Verified**: 2026-09-08 (14 sensors). **Tests**: `tests/fixtures/kev.json`.