# NIST SP 800-207 Zero Trust Architecture

**Canonical:** https://apis.io/apis/zero-trust-architecture/nist-sp-800-207/  
**Provider:** Zero Trust Architecture — https://apis.io/providers/zero-trust-architecture/  
**Documentation:** https://csrc.nist.gov/pubs/sp/800/207/final

NIST SP 800-207 Zero Trust Architecture is one of 5 APIs that [Zero Trust Architecture](https://apis.io/providers/zero-trust-architecture/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include NIST, Security Framework, and Zero Trust. The published artifact set on APIs.io includes API documentation.

NIST Special Publication 800-207 defines zero trust architecture (ZTA) and provides a roadmap for organizations migrating to ZTA. It describes seven ZTA tenets, three logical components (Policy Decision Point, Policy Enforcement Point, Policy Administration Point), three approaches to ZTA deployment, and guidance on threat models and use cases. Published August 2020.

## Machine-readable artifacts (3)

- **Documentation** — https://csrc.nist.gov/pubs/sp/800/207/final
- **Documentation** — https://nvlpubs.nist.gov/nistpubs/specialpublications/NIST.SP.800-207.pdf
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/zero-trust-architecture/refs/heads/main/apis.yml

## Other Zero Trust Architecture APIs (4)

- [NIST SP 800-207A ZTA for Cloud-Native Applications](https://apis.io/apis/zero-trust-architecture/nist-sp-800-207a/)
- [SPIFFE - Secure Production Identity Framework for Everyone](https://apis.io/apis/zero-trust-architecture/spiffe/)
- [SPIRE - SPIFFE Runtime Environment](https://apis.io/apis/zero-trust-architecture/spire/)
- [Open Policy Agent (OPA)](https://apis.io/apis/zero-trust-architecture/open-policy-agent/)

## Tags

NIST, Security Framework, Zero Trust

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/zero-trust-architecture/nist-sp-800-207/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/zero-trust-architecture/.