ISMS CopilotMappings at volume, at a price you can run every week.
isms-mini for the bulk, isms-thinking for the hard calls, both with the framework modules you pin.
isms-mini costs $0.50 in and $2.00 out per million tokens: about $5 per 1,000 answers at a measured size. Pin the frameworks, ask for structure in the prompt, and send the hard calls to isms-thinking.
curl https://api.ismscopilot.com/v1/chat/completions \
-H "Authorization: Bearer sk-isms-..." \
-H "Content-Type: application/json" \
-d '{
"model": "isms-mini",
"messages": [
{"role": "user", "content": "Map ISO 27001 A.5.23 to SOC 2. Answer as: control, criterion, fit (full, partial), one-line reason."}
],
"ismscopilot": { "frameworks": ["ISO_27001", "SOC_2"] }
}'Cost per 1,000 answers
At one measured size: about 6,500 input and 700 output tokens with one module pinned. Your size will differ; the console shows the real cost per call.
- isms-mini
- About $5. For formatting, extraction, classification and first-pass mappings.
- isms-fast
- About $24. For answers someone signs. isms-thinking adds reasoning tokens, so the same question costs more.
Pin the framework, do not hope for detection
Auto-detection reads user messages, not system prompts, so inside an agent loop it can miss. Send the ismscopilot extension with exact catalog ids, up to eight per call. The response names the modules it used.
Same model, with and without the knowledge
We published the benchmark with its losses: on a frozen 20-task compliance set, the same base model scored differently depending on the knowledge injected at inference.
The honest limits
Text in, text out. No JSON mode, no tool calling, no images: ask for the structure you need in the prompt and validate it in your code. A mapping is model-generated text for a person to check, not an official crosswalk.
Works with your stack
- LiteLLM
As an OpenAI-compatible text-only provider
- Vercel AI SDK
OpenAI-compatible provider, plain text generation
- Claude Code, Cursor, Codex
As a sub-agent step from a script, or over MCP
- Framework mapping guides
ISO 27001, SOC 2, NIS 2 and more
Frequently Asked Questions
When should I not use isms-mini?
For answers a reviewer signs or for ambiguous questions. Use isms-thinking there; it uses more tokens at the standard rate.
Is the first call free?
While the offer runs, a new API account can get a one-time USD 2 credit when it creates its first key. It is one per person, and accounts that sign in only with Microsoft do not qualify. After that, prepaid credits from USD 20.