controller: just cast in internal API where we have checked parameters already