Ox Alpha: free 1M context, from a provider who won't sign it

A model called Ox Alpha showed up on OpenRouter last week with a million-token context window, 131,072 tokens of output, and a price of zero. Developers started pointing coding agents at it immediately. The listing also says the provider is anonymous and keeps your prompts. Both of those things are on the same page, and only one of them is getting shared.

What actually happened

OpenRouter lists Ox Alpha under its stealth namespace as "a reasoning model designed for coding, sustained agentic work, and production workloads." The specs are real: 1,048,576 tokens of context, 131,072 max completion tokens, text plus image and video input, function calling, JSON mode. Input and output both price at $0.

The provider line is the part to read: the model is "developed and operated by a third-party provider who has chosen to remain anonymous during this preview." And on data: "prompts and completions for this model are retained by the provider and are not used for training." Everything else falls under OpenRouter's Stealth Model Terms.

TechCrunch reported on August 23 that nobody outside the deal knows who built it. The guessing has run from Chinese labs to an unreleased Microsoft model. None of it is confirmed, which is the whole point of a stealth launch — the lab gets clean benchmark signal and a wave of free evaluation traffic without its name attached to the misses.

Why an anonymous model provider matters for your business

"Not used for training" is not "not stored." Those are two different promises, and the listing only makes the first one. Retention means your prompts sit somewhere, under a jurisdiction you cannot name, operated by a company you cannot name. If your coding agent's context window contains customer records, private repos, or an API key someone pasted into a config file, that is where it went.

Free preview pricing is a clock, not a price. Stealth models exist to collect evaluation data. When the preview closes it closes without notice, and anything you built on top of that endpoint stops working mid-sprint. Fine for a bake-off. Not fine for a job that runs nightly.

Test it the right way. Run Ox Alpha against your hardest refactor with synthetic or public code, score it, write the number down. That is real signal, and it costs you nothing. Then decide whether a named provider with a signed agreement is worth the difference.

Sources: OpenRouter Ox Alpha model page, TechCrunch.