Crosswalk Resolve

Resolve a control in one framework to its equivalents in another framework via the crosswalk graph. The resolver does a bounded breadth-first search across CCI hubs and direct mappings, returning every path it finds within maxHops. Both endpoints are public and do not require authentication.

Resolve a single control

GET /api/v1/crosswalk/resolve

Parameters

  • Name
    from
    Type
    string
    Description

    Source control as <framework>:<identifier> (e.g. nist-800-53:AC-2).

  • Name
    to
    Type
    string
    Description

    Target framework key (e.g. nist-800-171, cci, dod-8500).

  • Name
    version
    Type
    string
    Description

    Optional source framework version pin (e.g. Rev 5.1.1).

  • Name
    status
    Type
    string
    Description

    Filter mappings by workflow status. Repeatable. Allowed: auto, verified, rejected. Default: auto,verified.

  • Name
    maxHops
    Type
    integer
    Description

    Maximum path depth (default: 4).

Response

Response

{
  "from": {
    "framework": "nist-800-53",
    "identifier": "AC-2",
    "version": null
  },
  "to": "nist-800-171",
  "paths": [
    {
      "hops": 2,
      "controls": [
        { "framework": "nist-800-53", "identifier": "AC-2", "status": "auto" },
        { "framework": "cci", "identifier": "CCI-000015", "status": "verified" },
        { "framework": "nist-800-171", "identifier": "3.1.1", "status": "auto" }
      ]
    }
  ]
}

Returns 400 if from/to is missing, from is malformed, or maxHops is not a positive integer.


Resolve a batch

Resolve every combination of from × to in a single request. Each pair is resolved independently; one failure does not abort the batch.

POST /api/v1/crosswalk/resolve/batch

Request body

  • Name
    from
    Type
    array
    Description

    Array of { framework, identifier, version? } source controls.

  • Name
    to
    Type
    array
    Description

    Array of target framework keys.

  • Name
    status
    Type
    array
    Description

    Optional array of mapping statuses to include.

  • Name
    maxHops
    Type
    integer
    Description

    Optional max path depth (default: 4).

The total number of resolved pairs (from.length × to.length) cannot exceed 100.

Response

Response

{
  "from": [
    { "framework": "nist-800-53", "identifier": "AC-2" }
  ],
  "to": ["nist-800-171", "cci"],
  "results": {
    "nist-800-53:AC-2": {
      "nist-800-171": [
        {
          "hops": 2,
          "controls": [
            { "framework": "nist-800-53", "identifier": "AC-2", "status": "auto" },
            { "framework": "cci", "identifier": "CCI-000015", "status": "verified" },
            { "framework": "nist-800-171", "identifier": "3.1.1", "status": "auto" }
          ]
        }
      ],
      "cci": [...]
    }
  }
}

Returns 400 for invalid JSON, missing arrays, or exceeding the 100-pair limit.


Crosswalk playground

Crosswalk resolve playground

Resolve a control to a target framework.

Live playground

Request

curl "https://www.stigviewer.com/api/v1/crosswalk/resolve?maxHops=4"
GET
Response

Send a request to see the live response here.