@domcleal, @jmontleon, I'm just starting to look at this PR.  At first glance we should probably POST/PUT :associate rather than GET.
And yes, I like the idea of returning a collection of all associated hosts in a separate GET where we have metadata / count