Claude Mythos 5.2 vs xAI API (Grok)

Claude Mythos 5.2 85

Model reading for claude-mythos-5-2 on the Claude API. Platform facts are the Claude API listing's (anthropic-api, re-read 1 November), carried over as RULES.md allows for a model on an already graded platform. Commercial Terms with named contracting parties and Apache 2.0 SDKs (15). Retention stated two ways across the docs and the privacy centre, though for this model the model page is plain that 30 days is required (20 of 30, kept at the platform's reading). Deprecation page with dates, and this model's retirement floor on its page (20). Processing countries and subprocessors named (20). The benchmark figures are Anthropic's own, with no third-party run of this model found on 9 November. 15 + 20 + 20 + 20 = 75.

xAI API (Grok) 63

Closed service under xAI's enterprise terms, with the Python SDK under Apache-2.0 (15). The docs agree with each other on no training, 30-day abuse retention, 30-day storage of stateful responses and the ZDR route, but the privacy policy, enterprise terms and DPA at x.ai/legal answered a Cloudflare block page on 6 October and again on 6 November, so they couldn't be compared (15 of 30). Dated migration guides and redirect tables for each retirement, but no written deprecation policy, and Chat Completions, Anthropic compatibility and grok-voice-2.0 are labelled deprecated with no date (12 of 20). The US regional endpoint states what stays in the US, the global endpoint guarantees no region, and no subprocessor list was readable (10 of 20).

Claude Mythos 5.2 91

Model reading for claude-mythos-5-2 on the Claude API. Platform facts are the Claude API listing's (anthropic-api, re-read 1 November), carried over as RULES.md allows for a model on an already graded platform. Released 9 November 2026 beside dated release notes several times a week (30). 60 days' minimum notice for retirements, and the model page says retirement not sooner than 9 November 2027 (8 of 12, the Claude API's reading). Model shutdowns kept to notice (8). Support centre and dated notes (15). The sampled SDK issue without a reply, per the 1 October check (5 of 10). Current SDKs (15). Runtimes stated (10). 30 + 8 + 8 + 15 + 5 + 15 + 10 = 91.

xAI API (Grok) 77

Model reading. grok-imagine-image-quality and grok-imagine-image-pro retired on 2 November 2026 as announced in September, Grok Voice 3.0 and custom moderation controls in October, Grok 4.7 on 21 September (30). No minimum notice period found. Retirements come as dated migration guides, retired slugs redirect to a replacement rather than failing, billed at the replacement's price, and grok-voice-2.0 was deprecated in October with no end date (4 of 12). Shutdowns in the last 90 days with dates given in advance, grok-voice-transcribe-1.0 on 2 October and grok-imagine-image-quality on 2 November (8 of 8). Release notes several times a month but dated only by month, support by email and a Discord #help channel, not tested. On xai-sdk-python a collaborator commented on 2 of the 16 most recent threads with replies, and most outside pull requests since 23 October are open without a maintainer reply (10 of 15, down from 12). The repository has CI, release and version-bump workflows (5 of 10). One current first-party SDK, xai-sdk 1.21.0 tagged on 23 October, Python only (10 of 15). Supported runtimes stated, Python 3.10 or later (10).

Claude Mythos 5.2 60

Model reading for claude-mythos-5-2 on the Claude API. Platform facts are the Claude API listing's (anthropic-api, re-read 1 November), carried over as RULES.md allows for a model on an already graded platform. Status page at status.claude.com with component history (20). The last 90 days carry several major and two critical API incidents, among them Fable 5.1 and Mythos 5.1 on 3 September and Fable 5.1 on 23 and 25 October, so 0 for incident history. Rate limits published per model, Fable 5.x at 4,000 requests a minute at the Start tier (15). 429s with retry-after and SDK retries with backoff (15). No SLA on sale (0). The model page lists it as a current model with no preview label (10). 20 + 0 + 15 + 15 + 0 + 10 = 60. Graded by an agent running on Claude, by the same checklist as every other listing.

xAI API (Grok) 55

Status page at status.x.ai with components for the global and US API endpoints, voice, the consumer apps and, since the Cursor merger, Cursor's services, with an RSS feed (20). The feed, read on 6 November, now holds 267 incidents back to 11 August, so the whole 90-day window is readable. On the API components there were high error rates on grok-4.6 and grok-4.5 from 21:57 to 23:28 UTC on 17 August (about 90 minutes) and a models outage on the global and US endpoints from 13:30 to 17:09 UTC on 3 September (about 3 hours 40 minutes), so several majors. A 26-minute datacenter outage across the API on 22 September, voice disruptions of 12 and 28 minutes on 10 September and 6 October, a 63-minute voice and Imagine degradation on 30 October and a 37-second model degradation on 24 October add to the record (0). Rate limits published per model and tier, grok-4.7 at Tier 0 is 150 requests a second and 50M TPM, with the per-second cap derived as RPM divided by 48 (15). The rate-limits page shows exponential backoff on 429, but no Retry-After header or overload guidance was found (10 of 15). No SLA found in the docs or llms.txt (0). The Responses API has been GA since September 2025 and grok-4.7 carries no preview label (10).

Claude Mythos 5.2 95

Model reading for claude-mythos-5-2 on the Claude API. Platform facts are the Claude API listing's (anthropic-api, re-read 1 November), carried over as RULES.md allows for a model on an already graded platform. Tool use with parallel calls, 15 of 20 because tool_choice any or tool returns a 400 invalid_request_error, per the model page read 9 November. Structured outputs (15). Prompt caching with reads at $0.20, 0.025x input, per the pricing page read 9 November (15). 1M context by default and at most, 128K output (15). Batch at half price (10). Official SDKs in seven languages (10). Documented errors, retry-after and retries (15). 15 + 15 + 15 + 15 + 10 + 10 + 15 = 95.

xAI API (Grok) 90

Model reading of the checklist (tool use, structured output, caching, context, batch, SDKs, errors). Function calling with parallel calls on by default and tool_choice of auto, required, none or a named function (20). Guaranteed structured outputs (15). Automatic prompt caching, cached input at 0.25x on grok-4.7 ($0.50 per million) and 0.16x on grok-4.3 (15). 500,000-token context on grok-4.7 and 1,000,000 on grok-4.3, 13 of 15 for the default model's 500K. The Batch API is now 20% off on grok-4.7, 4.6 and 4.5 as well as the older models, with batch requests outside the rate limits (10 of 10, up from 5 on 6 October). One first-party SDK, xai-sdk for Python, with the OpenAI SDKs and Vercel's AI SDK documented as alternatives (5 of 10). Status codes documented with fixes, no Retry-After header found (12 of 15).

Claude Mythos 5.2 92

Model reading for claude-mythos-5-2 on the Claude API. Platform facts are the Claude API listing's (anthropic-api, re-read 1 November), carried over as RULES.md allows for a model on an already graded platform. Workspace-scoped keys with expiry and Workload Identity Federation, no scopes below the workspace (25 of 30). No training on API data without express permission (20). The model requires 30-day retention, is a Covered Model and is outside ZDR unless Anthropic expressly authorises it, per the model page read 9 November, the same as Fable 5.1 (12 of 15). Usage and cost analytics, Compliance API and OpenTelemetry export (15). security.txt, HackerOne and SOC 2, ISO 27001 and ISO 42001 (20). Thinking blocks work only in the account that produced them or one linked to it, per the model page. 25 + 20 + 12 + 15 + 20 = 92.

xAI API (Grok) 97

Model reading. Team API keys with ACLs per endpoint and per model, QPM and TPM caps, expiry, and create, rotate, disable and delete through the Management API, plus documented mTLS. GitHub secret scanning disables leaked keys and emails the owner (30). The security FAQ says SpaceXSI never trains on API inputs or outputs without explicit permission (20). Requests and responses are kept 30 days for abuse auditing, then deleted, and team admins can switch on zero data retention themselves, confirmed by an x-zero-data-retention header on every response (15). Console audit log and a Management API audit-events endpoint, plus optional per-key request logging (15). security.txt valid to 2027-06-29 with a HackerOne bug bounty and a separate safety contact for prompt-injection issues. SOC 2 Type 2 is claimed in the security FAQ with the reports behind an NDA in the trust centre, so 17 of 20. Remote MCP doesn't support require_approval, which the model checklist doesn't score but reviewers should see. New in October, a guidelines array lets the caller make the model decline nsfw, violence or profanity content, which the checklist doesn't score.