Crosswalk Resolve
Resolve a control in one framework to its equivalents in another framework via
the crosswalk graph. The resolver does a bounded breadth-first search across CCI
hubs and direct mappings, returning every path it finds within maxHops. Both
endpoints are public and do not require authentication.
Resolve a single control
GET /api/v1/crosswalk/resolve
Parameters
- Name
from- Type
- string
- Description
Source control as
<framework>:<identifier>(e.g.nist-800-53:AC-2).
- Name
to- Type
- string
- Description
Target framework key (e.g.
nist-800-171,cci,dod-8500).
- Name
version- Type
- string
- Description
Optional source framework version pin (e.g.
Rev 5.1.1).
- Name
status- Type
- string
- Description
Filter mappings by workflow status. Repeatable. Allowed:
auto,verified,rejected. Default:auto,verified.
- Name
maxHops- Type
- integer
- Description
Maximum path depth (default:
4).
Response
Response
{
"from": {
"framework": "nist-800-53",
"identifier": "AC-2",
"version": null
},
"to": "nist-800-171",
"paths": [
{
"hops": 2,
"controls": [
{ "framework": "nist-800-53", "identifier": "AC-2", "status": "auto" },
{ "framework": "cci", "identifier": "CCI-000015", "status": "verified" },
{ "framework": "nist-800-171", "identifier": "3.1.1", "status": "auto" }
]
}
]
}
Returns 400 if from/to is missing, from is malformed, or maxHops is not
a positive integer.
Resolve a batch
Resolve every combination of from × to in a single request. Each pair is
resolved independently; one failure does not abort the batch.
POST /api/v1/crosswalk/resolve/batch
Request body
- Name
from- Type
- array
- Description
Array of
{ framework, identifier, version? }source controls.
- Name
to- Type
- array
- Description
Array of target framework keys.
- Name
status- Type
- array
- Description
Optional array of mapping statuses to include.
- Name
maxHops- Type
- integer
- Description
Optional max path depth (default:
4).
The total number of resolved pairs (from.length × to.length) cannot exceed
100.
Response
Response
{
"from": [
{ "framework": "nist-800-53", "identifier": "AC-2" }
],
"to": ["nist-800-171", "cci"],
"results": {
"nist-800-53:AC-2": {
"nist-800-171": [
{
"hops": 2,
"controls": [
{ "framework": "nist-800-53", "identifier": "AC-2", "status": "auto" },
{ "framework": "cci", "identifier": "CCI-000015", "status": "verified" },
{ "framework": "nist-800-171", "identifier": "3.1.1", "status": "auto" }
]
}
],
"cci": [...]
}
}
}
Returns 400 for invalid JSON, missing arrays, or exceeding the 100-pair limit.
Crosswalk playground
Crosswalk resolve playground
Resolve a control to a target framework.
Request
curl "https://www.stigviewer.com/api/v1/crosswalk/resolve?maxHops=4"Send a request to see the live response here.