Nobody Knows Who Built This AI—Or Where Your Code Goes
The Mystery of Ox Alpha: A Free, Powerful AI Coding Model That Appeared Out of Nowhere
What Is Ox Alpha and Why Is Everyone Talking About It?
Imagine walking into a restaurant and finding a brand-new, Michelin-star meal on the menu for free—but no chef will admit they cooked it. That’s basically what happened in the AI world on August 20, 2024.
A mysterious model called "Ox Alpha" suddenly appeared on two platforms:
- OpenRouter (a marketplace that lets developers access many AI models through one door)
- OpenCode (an open-source coding agent that lives in your terminal)
The kicker? It’s completely free—no cost for input or output—and offers near-unlimited usage (advertised at 100 trillion tokens per day). But no company has stepped forward to claim it.
Important Callout
This is highly unusual. Frontier-class AI models (the smartest, most capable ones) typically cost millions to train and run. Companies usually guard them closely and charge premium prices. A free, no-strings-attached release of this caliber is practically unheard of.
What Can Ox Alpha Actually Do?
Here are the technical specs in plain English:
| Feature | What It Means |
|---|---|
| Context Window: 1,048,576 tokens | It can "remember" and work with roughly 750,000 words at once—that’s about 10 full-length novels in a single conversation. |
| Output Limit: 131,072 tokens | It can generate ~100,000 words in one response—enough for a short book or a massive codebase. |
| Accepts: Text, Images, Video | You can show it screenshots, diagrams, or video clips and ask questions about them. |
| Rejects: Audio | It won’t process voice or sound files (at least not yet). |
| Marketed As | A "reasoning system for long-horizon software engineering and sustained agentic work"—fancy talk for "great at complex, multi-step coding projects that take a while." |
The Benchmark Drama: Is It Actually Good?
Round 1: The Exciting First Look
Developer Ben Davis (@davis7) tested Ox Alpha on 10 tasks from the DeepSWE benchmark (a test suite for software engineering skills).
| Model | Score |
|---|---|
| Ox Alpha | 80%+ |
| Claude Fable 5 | 65% |
| GPT-5.6-sol | 52% |
The internet went wild. But Davis himself warned everyone: "Only 10 tasks? That’s a tiny sample. High variance—don’t pop the champagne yet."
Round 2: The Full Test
Davis ran the entire DeepSWE benchmark later. The result?
Ox Alpha scored roughly level with GPT-5.6-sol (mid version)—not dramatically better.
Important Callout
Early benchmarks on small samples can be misleading. It’s like judging a baseball player on 3 at-bats instead of a full season. The full test tells a more honest story.
No public leaderboard has officially posted Ox Alpha results yet.
The Detective Work: Who Built This Thing?
Since no one claimed credit, developers started digital fingerprinting.
The Tool: modelprint
Developer unclecode (creator of the Crawl4AI web crawler) built a tool called modelprint that probes anonymous AI endpoints and compares their "fingerprints" against known models.
How it works:
- Sends 9 different infrastructure probes to the model’s endpoint
- Measures how the model responds (timing, tokenization, formatting quirks)
- Matches those patterns against known models
The Results
| Probe Type | Ox Alpha Match with GLM-5.3? |
|---|---|
| Normalized tokenizer counts (4 tests) | All 4 matched |
| Other infrastructure probes (5 tests) | 2 of 5 matched |
| Total | 6 of 9 probes matched |
No other lab’s top model cleared more than 2 of the 4 tokenizer tests.
But Here’s the Catch
Important Callout
unclecode explicitly says: "Matching fingerprints prove shared infrastructure, not identity. A lab can serve two different models on the same stack."Translation: Ox Alpha runs on the same servers as GLM-5.3, but it might not be GLM-5.3.
The Suspects: Who’s the Most Likely Creator?
Suspect #1: Z.ai (formerly Zhipu AI)
- History of anonymous previews: Ran GLM-5 on OpenRouter as "Pony Alpha" before official release
- Timeline fits: GLM-5.3 officially launched August 14—just 6 days before Ox Alpha appeared
- Fingerprint evidence: Strongest match on infrastructure and tokenizer behavior
Suspect #2: Xiaomi’s MiMo Team
- Also has history of unbranded model previews
- Mentioned multiple times by testers on X (Twitter)
- Some tokenizer behavior points to
cl100k_base—OpenAI’s token encoding, which would be odd for a Chinese model
Suspect #3: Someone Else Entirely
- Could be a new lab, a joint venture, or a fork running on shared cloud infrastructure
- The
cl100k_basetokenizer clue complicates the Z.ai theory
ELI5: What’s a Tokenizer?
A tokenizer is how an AI chops up text into chunks (tokens) it can process. Different models use different "chopping rules."cl100k_baseis OpenAI’s specific chopping method—finding it in a Chinese model would be like finding a Ford engine in a Toyota.
The Privacy & Security Elephant in the Room
The Terms Are… Confusing
| Platform | What They Say About Your Data |
|---|---|
| OpenRouter | "Prompts and completions are retained by the provider and not used for training" |
| OpenRouter (broader terms) | Anonymous previews can be used for training, evaluation, and improvement |
| OpenCode | Advertises zero retention from a provider they won’t name |
These statements contradict each other. Which one actually applies? Unclear.
The Zhipu AI Entity List Problem
If Ox Alpha is from Z.ai (formerly Zhipu AI), there’s a major geopolitical issue:
On January 16, 2025, the U.S. Commerce Department added Zhipu AI to its Entity List—a trade restriction list for entities deemed to advance China’s military modernization through AI research.
What this means for developers:
- Enterprise code is flowing to a provider with no name attached
- Nobody sending code can verify where it lands or who sees it
- Using this model may violate export controls or corporate security policies
Important Callout
This isn’t just theoretical. Bloomberg reported that billions of tokens have already flowed through Ox Alpha from tools like Claude Code since launch. Real production code is being sent to an anonymous endpoint.
Current Status: The Show Goes On
Despite all the questions, usage hasn’t slowed down:
- Billions of tokens processed since Thursday (per Bloomberg, Aug 23)
- Developers are flocking to free, high-capacity access
- OpenRouter’s official stance: "We’re not the developer, owner, or operator of Ox Alpha—we only route requests to it."
Summary: What You Need to Know
| What We Know | What We Don’t Know |
|---|---|
| Ox Alpha exists and is free on OpenRouter & OpenCode | Who actually built it |
| It has massive context (1M tokens) and output (131K tokens) | Whether it’s GLM-5.3, a variant, or something else |
| Early benchmarks were promising but small-sample | If the privacy terms protect your code |
| Fingerprinting strongly suggests Z.ai infrastructure | Whether using it violates US export controls |
| Z.ai has done anonymous previews before | How long free access lasts (Aug 24 on OpenRouter, ~Aug 27 on OpenCode) |
| Zhipu AI (Z.ai’s former name) is on US Entity List | What happens after the free period ends |
FAQ
1. Can I use Ox Alpha for my company’s proprietary code?
Probably not a good idea right now. The provider is anonymous, terms are contradictory, and if it’s Z.ai, the Entity List designation creates legal risk. Wait for clarity.
2. Is Ox Alpha actually GLM-5.3?
Likely runs on the same infrastructure, but fingerprinting only proves shared servers—not that they’re the same model. Think of it like two restaurants sharing a kitchen: the food might be different.
3. How long will it stay free?
OpenRouter says through Monday, August 24. OpenCode promised ~1 week from August 20 (so ~August 27). After that? Unknown.
4. Why would a company release a frontier model for free anonymously?
Possible reasons: stress-testing infrastructure, gathering real-world usage data, building hype before launch, or testing market reception without brand risk.
5. What should I do if I’ve already sent code to Ox Alpha?
Audit what you sent. If it included secrets, API keys, or proprietary algorithms, rotate those credentials. Assume the data may have been retained despite claims.
Final Thought
Ox Alpha is a fascinating case study in AI transparency—or lack thereof. It highlights how developers chase capability first and ask questions later. Whether it’s a marketing stunt, a geopolitical maneuver, or just a lab testing the waters, the lesson is the same: know who’s on the other side of the API before you send your code.