Ox Alpha: What We Know About the Mystery AI Model

Nobody has officially said who built Ox Alpha. OpenRouter lists it under the generic "Stealth" provider. OpenCode calls it simply "the stealth model." The anonymous provider itself has stayed anonymous. But in the 36 hours since launch, independent researchers ran two separate technical fingerprinting tests — and both point to the same answer: a hidden variant of Zhipu AI's GLM-5.3.

This is not another "community vibes" guess. It's measured evidence, and it's specific enough to walk through piece by piece — which is exactly what most coverage of this story hasn't done.

TL;DR

The evidence, ranked by how much it actually proves

Most "who made Ox Alpha" coverage lists a handful of vibes-based guesses — "it feels like GLM," "someone thinks it's MiMo" — without explaining why. Here's what actually happened, ranked from strongest to weakest.

1. Tokenizer fingerprinting across 25 prompts (strong)

Researcher @aitrackerbot ran 25 diverse prompts through Ox Alpha and recorded exact token counts, then compared those counts against known tokenizers for candidate models. The result, posted directly: "Fingerprint result: OpenRouter's Ox Alpha strongly points to a hidden multimodal GLM-5.3 variant. Across 25 diverse prompts, its native token counts matched GLM-5.3 exactly apart from a constant +75-token hidden wrapper. Ox also accepts image input. Identity is unconfirmed."

A tokenizer is effectively a fingerprint: two different base models very rarely split the same text into identical token sequences by coincidence, especially across 25 varied prompts. A constant +75-token offset on every request is the signature of a system prompt or routing wrapper OpenRouter or the provider adds on top — not evidence against the match, since it's the same fixed overhead on every single test.

2. Video-encoder analysis across 4 test videos (strongest — and the most specific)

The same researcher went further with video inputs, since Ox Alpha accepts video and most rival candidates don't, or handle it differently. Testing four controlled videos, Ox Alpha's token spend matched GLM-5V-Turbo — Zhipu's own multimodal agent model, documented in Zhipu's arXiv paper on GLM-5V-Turbo — token-for-token identical, across three independent encoder design choices:

• FPS-invariant frame sampling — how many frames get extracted regardless of the source video's frame rate
• ~147 tokens/second duration scaling — how token cost grows with video length
• Per-frame resolution scaling — how token cost changes with frame resolution

Three independent design choices matching exactly is a much harder coincidence to explain away than a single number lining up. This is the piece of evidence that's genuinely hard to dismiss as pattern-matching enthusiasm.

3. Elimination of rival candidates (corroborating)

The same test suite was run against the other names actually in circulation — MiMo v2.5, Qwen 3.8 Max, and GLM-4.6V — and none of them matched. All three produced clearly different tokenizer and/or encoder signatures from Ox Alpha.

One elimination is worth calling out specifically: Ox Alpha rejects audio input, routing it the same way GLM-5V does (no audio endpoint exposed at all). MiMo v2.5, by contrast, accepts and tokenizes audio. That's a binary behavioral difference, not a statistical fingerprint — either a model has an audio endpoint or it doesn't — which makes it a clean disqualifier for the MiMo theory specifically, independent of the tokenizer and video evidence.

4. Insider-adjacent commentary (weak, but corroborating)

dax (@thdxr — associated with OpenCode, which shipped its own direct Ox Alpha integration the same week) posted, in reply to the fingerprinting thread circulating: "i told you guys we had more guess what model it is." Read plainly, that's someone with plausible closeness to the routing/serving side signaling agreement with the GLM-5.3 theory — not an on-the-record confirmation, and not sourced to anything beyond a tweet, but a data point worth weighing above an anonymous forum guess.

What this rules against: the MiMo and Qwen theories

Before the fingerprinting results, the two most common guesses in replies and Reddit threads were Xiaomi's MiMo (on the pattern precedent that past stealth models — Hunter Alpha and Healer Alpha — both turned out to be MiMo) and, less commonly, Qwen 3.8 27B or Qwen 3.8 Max (a specific claim that circulated on Reddit's r/opencodeCLI without published supporting evidence).

Both are now weaker theories than they were on launch day:

• MiMo v2.5 is directly contradicted by the audio-endpoint behavior difference above.
• Qwen 3.8 Max was included in the same fingerprinting pass and produced a different tokenizer/encoder signature than Ox Alpha — the Reddit claim doesn't hold up against the actual test.

The MiMo precedent is still worth understanding even though it's now the less likely answer here: Hunter Alpha and Healer Alpha, two earlier OpenRouter stealth previews, were both eventually confirmed as Xiaomi MiMo releases after their preview windows ended. That's real precedent for "stealth listing → later official reveal" as a pattern — it just points to a different lab as the actual match this time, based on the fingerprinting evidence specifically.

Why would Zhipu ship this anonymously?

If the GLM-5.3 theory holds, the obvious question is why a lab would hide its own model rather than launch it under the GLM name. The Hunter/Healer-as-MiMo precedent answers this directly: an anonymous stealth listing on a neutral platform collects real-world usage, benchmark results, and failure modes at massive scale — Ox Alpha's own OpenRouter dashboard shows Claude Code and Hermes Agent alone pushing billions of tokens through it within days — before the model has to carry a lab's name and reputation into that scrutiny. It's a lower-risk way to stress-test a frontier checkpoint against real production traffic before a formal launch.

What's still genuinely unconfirmed

Be precise about what this evidence does and doesn't establish. Tokenizer and encoder fingerprinting is strong circumstantial evidence — matching internal technical signatures is much harder to fake or coincide with by chance than matching output style, which is closer to what most "it feels like X" guesses rely on. But it is still not:

• A leaked training document
• A statement from Zhipu AI
• A statement from OpenRouter or the anonymous provider naming the lab
• An admission from OpenCode beyond a single ambiguous tweet

Until one of those exists, "strongly points to GLM-5.3, roughly 90% confidence per independent fingerprinting, officially unconfirmed" is the accurate summary — not "Ox Alpha is GLM-5.3, confirmed." Watch Zhipu's official channels and OpenRouter's stealth model page for the actual reveal, which — per the Hunter/Healer precedent — will most likely land only after the free preview window closes.

Related on explainx.ai

• Top 10 things people are building with Ox Alpha — fluid sims, 3D scenes, a DeepSWE benchmark run, and more
• OpenRouter Ox Alpha: free 1M-context stealth model — full specs, pricing, and setup
• Heretic: complete guide to automatic LLM censorship removal
• Choosing open-weight vs. closed AI models
• AI token pricing, explained
• Hermes Agent #1 on OpenRouter rankings

Primary sources: @aitrackerbot fingerprinting thread on X · dax (@thdxr) on X · GLM-5V-Turbo documentation, Z.AI · GLM-5V-Turbo paper, arXiv · Ox Alpha on OpenRouter

Identity evidence in this post is independent fingerprinting analysis, not official confirmation from any named lab. Treat the GLM-5.3 theory as the current leading, evidence-backed hypothesis — not a confirmed fact — until Zhipu, OpenRouter, or the provider states otherwise. Follow @explainx_ai for updates.