Ox Alpha is an anonymous large language model that appeared on OpenRouter and OpenCode Go in August 2026 with strong coding performance, a 1M-token multimodal context window, and near-unlimited free access; forensic evidence points to Zhipu AI's GLM family while some speculate Google DeepMind, but no operator has confirmed ownership.

Ox Alpha showed up on OpenRouter on August 20, 2026, listed only under the generic 'stealth' provider category, with no company name, logo, or press release attached ^[1]. That vacuum turned identity-guessing into a public research project. On August 22, a researcher going by Chetaslua triggered a Java stack trace from the model's API that exposed an internal class path matching a documented Zhipu API route, calling it implementation detail leaking at the routing layer rather than another round of community guessing ^[2][3]. Separate tokenizer testing found Ox Alpha's token counts run a consistent 75 tokens higher than Zhipu's GLM-5.3 across roughly 30 prompts spanning 14 writing systems, a fingerprint that is hard to fake by accident ^[3]. Testers pushed the comparison into more sensitive territory too: one live test asked Ox Alpha whether Taiwan is part of China and got an answer nearly identical to GLM's, another data point some read as circumstantial confirmation of the Zhipu link. On the Kingbench benchmark, Ox Alpha scored 87.5%, trailing GLM-5.3's 91.25% by less than four points and clearing Opus 4.8 and Qwen 3.8 Max by a wide margin ^[4]. Independent analysis of its behavior also estimated a roughly 744-billion-parameter mixture-of-experts architecture with about 40 billion active parameters, though this figure is inferred rather than disclosed ^[5]. Coding benchmarks told a messier story: an initial 10-question DeepSWE sample had Ox Alpha beating Fable 5, GLM-5.3, and GPT-5 outright at an 80% pass rate ^[5][10], but a later 113-task run from the same tester found a more modest 63% pass rate, described as 'on par with GPT-5.6 Sol mid' rather than clearly ahead of it ^[6]. Small benchmark samples make for viral claims and shakier conclusions. Not every side-by-side test lines up neatly behind Zhipu, either: one tester running personal coding-challenge benchmarks noted stylistic similarities to GLM's known quirks but ultimately ruled out GLM, Gemini, GPT, and DeepSeek as matches based on behavioral fingerprints, concluding the identity remains genuinely ambiguous even under close hands-on testing.

Ox Alpha is not the first anonymous model to appear unannounced and get outed by the crowd. Zhipu itself ran a stealth preview called Pony Alpha in February 2026 that was revealed roughly five days later as GLM-5; Xiaomi followed the same script with Hunter Alpha, later unmasked as MiMo-V2-Pro; Ant Group's Elephant Alpha took about two weeks to be confirmed as Lingxi Ling-2.6-flash; and Meituan's Owl Alpha stayed unattributed for over two months before surfacing as LongCat-2.0 ^[6]. That history is the strongest circumstantial case for Zhipu: Ox Alpha is the fifth stealth 'Alpha' launch in six months, and the first four were all eventually claimed by Chinese labs. The incentive is straightforward - an anonymous listing lets a lab stress-test serving infrastructure and gather head-to-head benchmark data against named competitors without committing to a release date or absorbing the reputational hit if the model underwhelms ^[6]. Free, unmetered access accelerates that data collection: OpenCode Go gave Ox Alpha unlimited use outside its normal quota starting August 21, and developers reportedly ran large volumes of independent benchmarks and fingerprinting tests during the free week ^[7].

Despite tokenizer and stack-trace evidence pointing toward Zhipu, two competing theories keep resurfacing. The more established one names Google DeepMind, fed less by technical forensics than by product parallels and cryptic posts from DeepMind-affiliated accounts ^[8]. At least one outlet noted the model's outputs were repeatedly mistaken for Gemini during blind testing, which some read as evidence of a Google origin and others read as evidence that today's frontier models, regardless of lab, have simply converged in style ^[9]. A newer theory floated in coverage of the story points instead to Microsoft's MAI model family, an idea reported alongside the Zhipu/GLM case rather than displacing it. No tokenizer, stack-trace, or error-code match tying Ox Alpha to Google or Microsoft has surfaced, and neither company has commented. That gap between 'the model feels like X' and 'the model's internals objectively match X' is why the mystery has not resolved even after multiple independent forensic passes: circumstantial, style-based evidence and hard infrastructure evidence are pointing in different directions, and confident claims on all sides carry similar certainty language without matching rigor. The public reaction has followed suit: Stripe CEO Patrick Collison called Ox Alpha 'very impressive,' while AI analyst Andrew Curran captured the broader mood by Saturday, saying people seem less sure of anything.

The offer is generous on paper: a claimed 100 trillion tokens of daily capacity, a 1,048,576-token context window, and multimodal input covering text, image, and video, all free during a preview window expected to run until around August 27, 2026 ^[1][6]. The fine print is inconsistent depending on where you access it, though. OpenRouter's own listing states that prompts and completions 'are retained by the provider and are not used for training' - meaning an anonymous, unaccountable operator is holding onto user data ^[1]. OpenCode Go's listing for the same underlying model states zero days of retention, a materially different policy for requests routed through a different front door ^[7]. For a tool being marketed at developers for sustained agentic coding work, that inconsistency matters: anyone pasting proprietary code into Ox Alpha is trusting data-handling terms set by an operator that, as of this writing, still has not said who it is.