Models

The catalog at GET /v1/models is the truth. Models belong to one of two teams; the team decides the route and the admission bar. Pass the id as model unchanged.

Shell

curl -s https://api.mithril.fund/v1/models -H "Authorization: Bearer $KOTOBA_API_TOKEN"
# → data[].id · team · route · availability

Teams and admission

Blue team
General models on the shared route. A signed-in principal and free quota — and guardrails on every request.

requirements: authenticated-principal · available-free-quota · guardrails
Red team
Security-research-tuned models on the dedicated route. Card-based identity verification, AUP consent, trust route, approved scope, free quota — and guardrails on every request.

requirements: authenticated-principal · verified-ekyc-card · aup-consent · current-aml-ctf-clearance · current-trust-route · approved-research-scope · available-free-quota · guardrails

Current catalog

qwen/qwen3.8-flash served
Blue team · route: shared · source
z-ai/glm-5.3-flash served
Blue team · route: shared · source
xiaomi/mimo-v2.6-flash served
Blue team · route: shared · source
xiaomi/mimo-v2.6-pro served
Blue team · route: shared · source
qwen3.8-flash-next-whitehacker served
Red team · route: dedicated · source
xiaomi/mimo-v2.6-flash-redteam served
Red team · route: dedicated · source
qwen3.8-27b-whitehacker served
Red team · route: dedicated · source
deepseek-v4.1-flash-whitehacker route not configured
Red team · route: dedicated · source
nex-n2.5-mini-whitehacker route not configured
Red team · route: dedicated · source
glm5.3-flash route not configured
Red team · route: dedicated · source

A model whose route is not configured is refused by name at admission and spends no quota. Which providers stand behind each route is operator configuration and is not stated here.

Per-model detail

qwen/qwen3.8-flash

A general model on the shared route. Sign-in only, no verification; the three standard tasks (code-review / vulnerability-triage / remediation). The id is the publisher's, used unchanged.

Team: Blue team · route: shared · served
Admission: a signed-in principal, free quota, guardrails (the three standard tasks only)
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes qwen/qwen3.8-flash (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"qwen/qwen3.8-flash","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

z-ai/glm-5.3-flash

The other general model on the shared route; the same admission and ceilings as qwen/qwen3.8-flash.

Team: Blue team · route: shared · served
Admission: a signed-in principal, free quota, guardrails (the three standard tasks only)
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes z-ai/glm-5.3-flash (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"z-ai/glm-5.3-flash","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

xiaomi/mimo-v2.6-flash

The shared route's light, fast model: Xiaomi MiMo-V2.6-Flash. The same admission and ceilings as qwen/qwen3.8-flash.

Team: Blue team · route: shared · served
Admission: a signed-in principal, free quota, guardrails (the three standard tasks only)
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes xiaomi/mimo-v2.6-flash (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"xiaomi/mimo-v2.6-flash","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

xiaomi/mimo-v2.6-pro

The shared route's flagship model: Xiaomi MiMo-V2.6-Pro. The same admission and ceilings as qwen/qwen3.8-flash.

Team: Blue team · route: shared · served
Admission: a signed-in principal, free quota, guardrails (the three standard tasks only)
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes xiaomi/mimo-v2.6-pro (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"xiaomi/mimo-v2.6-pro","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

qwen3.8-flash-next-whitehacker

A flash-class model tuned for security research: code review, vulnerability triage, remediation. It reasons before answering and returns native tool calls. Unrestricted for authorized researchers; AUP consent is the premise.

Team: Red team · route: dedicated · served
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes dealignai/Qwen3.8-Flash-Next-CYBERSECURITY-NVFP4 (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"qwen3.8-flash-next-whitehacker","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

xiaomi/mimo-v2.6-flash-redteam

Team: Red team · route: dedicated · served
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes com-kotobalabs/MiMo-V2.6-Flash-Uncensored-NVFP4 (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"xiaomi/mimo-v2.6-flash-redteam","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

qwen3.8-27b-whitehacker

Team: Red team · route: dedicated · served
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes orcarouter/Qwen3.8-27B-Uncensored-NVFP4 (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"qwen3.8-27b-whitehacker","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

deepseek-v4.1-flash-whitehacker

Team: Red team · route: dedicated · route not configured
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes deepseek-v4.1-flash (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"deepseek-v4.1-flash-whitehacker","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

nex-n2.5-mini-whitehacker

Team: Red team · route: dedicated · route not configured
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes com-kotobalabs/Nex-N2.5-mini-Uncensored-W4A16-AutoRound (strictly matched)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"nex-n2.5-mini-whitehacker","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'

glm5.3-flash

The red team's second model. Its dedicated origin is not up yet, so it is listed and refused by name at admission (no quota spent). This page flips to “served” when the origin stands.

Team: Red team · route: dedicated · route not configured
Admission: card verification, AUP consent, approved scope (code-review comes with verification), free quota, guardrails
Ceilings: 524,288 input characters · 32,768 output tokens (reasoning included) · 128 tools · 2,048 turns
The answer's model echoes glm5.3-flash (validated on shape and content)

Shell

curl -s -X POST https://api.mithril.fund/v1/chat/completions -H "Authorization: Bearer $KOTOBA_API_TOKEN" \
  -H "content-type: application/json" -d '{"model":"glm5.3-flash","max_tokens":2048,"messages":[{"role":"user","content":"..."}]}'