Connector: JSON API list (jsonlist)
Purpose: keyed records from official JSON APIs. Used for CISA KEV, NVD CVE 2.0 ({now-3h} window),
Federal Register documents (rules, proposed rules, presidential documents), ClinicalTrials.gov v2, USGS
significant earthquakes (GeoJSON), Have I Been Pwned breaches, MSRC security updates, Google Cloud / Firebase /
Workspace incidents, NOAA SWPC alerts, Salesforce Trust incidents.
Config: itemsPath (dot path to the array, "" for a root array), keyField, titleField or
titleTemplate ({a.b} placeholders), urlField/urlTemplate ({key}), summaryField (arrays and
{lang,value} description lists are flattened), dateField, compareFields, maxItems, headers,
noConditional (for windowed queries), timeoutMs. URL placeholders {now}, {now-2h}, {now-30d}.
Rate limits: NVD 5 req/30 s without key (sensor interval 15 min); Federal Register 1000/h; ClinicalTrials
none documented; KEV is a static file (~1.7 MB, ETag).
Verified: 2026-09-08 (14 sensors). Tests: tests/fixtures/kev.json.