---
title: NIST National Vulnerabilities Database (NVD)
slug: authentication-guides/nist-national-vulnerabilities-database-nvd
docTags: 
createdAt: 2026-07-27T12:19:32.174Z
---

# Introduction

This guide tells you how to authenticate the **NIST National Vulnerabilities Database (NVD)** connector in Swimlane using an **API Key**.

The connector allows you to retrieve Common Vulnerabilities and Exposures (CVEs) and Common Platform Enumeration (CPE) information directly from the National Vulnerability Database. An API key is optional but strongly recommended because it increases the API rate limit from **5 requests per 30 seconds** to **50 requests per 30 seconds**.

# Prerequisites

## NIST Access Requirements

You must have:

- Access to the National Vulnerability Database (NVD).
- A valid email address to request an API key.
- Internet access to the NVD REST APIs.

# Required Credentials

During setup, you will collect:

- NIST API Key

# NIST Setup

### Take the following steps to generate an API Key:

1. Navigate to the **NIST API Key Request** page.
2. Enter your:
   - First Name
   - Last Name
   - Email Address
3. Read and accept the Terms of Use.
4. Click **Submit**.
5. Check your email inbox for a message from **nvd-noreply\@nist.gov**.
6. Open the activation link contained in the email.
7. Copy and securely save your API Key.

### Important:

- The activation link is valid for **7 days**.
- Each email address can have only one active API key.
- Requesting and activating a new key invalidates the previous key associated with that email address.

# Connector Configuration in Swimlane

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**.
3. Asset homepage opens.
4. Click the plus icon to open the **Configure your Connector Asset** window.
5. Select **NIST National Vulnerabilities Database** from the Asset type list.
6. Fill in the Asset Settings and Asset Input as shown:

| **Field**       | **Description**                 | **Required/Optional**  |
| --------------- | ------------------------------- | ---------------------- |
| **api\_key**    | NIST API Key                    | Optional (Recommended) |
| **verify\_ssl** | Enable/Disable SSL Verification | Optional               |
| **http\_proxy** | Optional proxy configuration    | Optional               |

Fields with \* marks are required.

7. Click **Create**.

::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/XfrCkn21TU3XqM9e7Wwh4_image.png" size="200" isUploading="false" width="800" height="406" darkWidth="800" darkHeight="406" showCaption="false"}

# Troubleshooting

### API Rate Limit Reached

If you receive rate limit errors:

- Verify that your API key has been entered correctly.
- Use an API key to increase your request limit.
- Reduce the frequency of API requests if necessary.

### Authentication Failed

Verify that:

- The API key has been activated.
- The API key has been copied correctly.
- The API key has not been regenerated or revoked.

### Unable to Connect

Verify that:

- Your internet connection allows outbound HTTPS traffic.
- Proxy settings are configured correctly if your environment uses a proxy.

### SSL Errors

If SSL verification fails:

- Verify that your system trusts the NIST SSL certificate.
- Disable **verify\_ssl** only for testing if permitted by your organization's security policy.

### Result

You have successfully authenticated the **NIST National Vulnerabilities Database** connector in Swimlane.

### Sources

- NIST National Vulnerability Database API Key Requests
  [https://nvd.nist.gov/developers/request-an-api-key](https://nvd.nist.gov/developers/request-an-api-key)
- NIST National Vulnerability Database API Documentation
  [https://nvd.nist.gov/developers/start-here](https://nvd.nist.gov/developers/start-here)
