# GLM-5.3-Flash

> GLM-5.3-Flash is Z.ai's open-weight multimodal mixture-of-experts model, 320B parameters with 18B active and a 1,048,576-token context, published on Hugging Face in FP8 and BF16 under the MIT licence.

- Canonical: https://www.anchorterminal.com/tools/glm-5-3-flash
- Pricing: https://www.anchorterminal.com/tools/glm-5-3-flash#pricing
- Reviews: https://www.anchorterminal.com/tools/glm-5-3-flash#reviews
- Markdown: https://www.anchorterminal.com/tools/glm-5-3-flash.md (~10,400 tokens)
- Slim: https://www.anchorterminal.com/tools/glm-5-3-flash.min.md (~2,080 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/tools/glm-5-3-flash.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-10-21

## Overview

**Grade B · 65.1/100 · rank #16 of 100 open-weight models · #13 in Open-weight models · not agent-ready · confidence high**


More from Z.ai, listed separately because each is its own product: [GLM-4.5-Air](https://www.anchorterminal.com/tools/glm-4-5-air.md) (Open-weight models), [GLM-4.7-Flash](https://www.anchorterminal.com/tools/glm-4-7-flash.md) (Open-weight models), [GLM-5.3](https://www.anchorterminal.com/tools/glm-5-3.md) (Open-weight models).

Trained by Z.ai (Zhipu AI), in the GLM-5 family, with [GLM-5](https://huggingface.co/zai-org/GLM-5), [GLM-5.1](https://huggingface.co/zai-org/GLM-5.1), [GLM-5.2](https://huggingface.co/zai-org/GLM-5.2), [GLM-5.3](https://www.anchorterminal.com/tools/glm-5-3.md). Every model from this lab and its older versions: https://www.anchorterminal.com/open-weights/#zai. At least 5 third-party copies with the refusals removed exist on Hugging Face; they are unvetted, we don't link them, and they are still bound by this licence.

## Assessment

An MIT-licensed multimodal agent and coding model with a 1M-token context and several tool calls per turn, served by vLLM, SGLang, llama.cpp and Transformers. Z.ai's smallest build is 328 GB in FP8, so it needs a multi-GPU server. The main risk is that nothing on safety or prompt injection is published and there is no way to report a flaw.

## Facts

| Field | Value |
| --- | --- |
| Vendor | Z.ai (https://z.ai) |
| Kind | Open-weight model |
| Category | Open-weight models (https://www.anchorterminal.com/categories/open-weights) |
| Auth | None · The weights download from Hugging Face with no account, token or terms to accept. Neither repository is gated (checked 2026-10-21). |
| Pricing | Free (Free) · Free to download and use, commercial use included, under the MIT licence. Z.ai also sells hosted access as glm-5.3-flash on its own API, which isn't graded here. Running the weights yourself costs the hardware, 328.4 GB for the FP8 files and 642.7 GB for BF16 (checked 2026-10-21). |
| x402 | No · Weights you download and run yourself, so there is nothing to pay per call and no payment protocol (checked 2026-10-21). |
| Licence | MIT |
| Packages | huggingface: `zai-org/GLM-5.3-Flash`; huggingface: `zai-org/GLM-5.3-Flash-BF16` |
| Source | https://huggingface.co/zai-org/GLM-5.3-Flash |
| Docs | https://huggingface.co/zai-org/GLM-5.3-Flash |
| llms.txt | not found |
| Last release | 2026-08-26 |
| Surface graded | The open weights at huggingface.co/zai-org/GLM-5.3-Flash (FP8) and zai-org/GLM-5.3-Flash-BF16, read from the model card, the files and their metadata, the chat template, the licence, Z.ai's GLM-5 GitHub repository and developer guide, and the runtimes' own code and recipes on 21 October 2026. Nothing was downloaded or run. Z.ai's hosted glm-5.3-flash API isn't graded here |
| Model | A mixture of experts with 320B parameters and 18B active per token, 288 routed experts and 1 shared, 8 routed per token, 45 layers mixing linear attention (34 layers) and sparse attention (11), Manifold-Constrained Hyper-Connections, one multi-token prediction layer and a 24-layer vision encoder. Text, images and video in, text out. 321,323,031,390 parameters in the files per Hugging Face's metadata |
| Files | Safetensors in both repositories, 62 shards and 328.4 GB in FP8 (block-wise E4M3, with BF16 for the parts left unquantised) and 120 shards and 642.7 GB in BF16, each with a chat_template.jinja. No pickle files and no Python. Hugging Face lists a SHA-256 for every shard |
| Licence | MIT for the weights, copyright Z.AI Co., Ltd. No acceptable use policy in the repository. Z.ai's GLM-5 GitHub repository is Apache 2.0 |
| Runtimes | Model code in Transformers from 5.16.1 (glm5_next), vLLM 0.32.0, SGLang 0.5.22, llama.cpp (glm5-next, in build b11768) and mlx-vlm 0.7.9. Ollama has a cloud entry only, and mlx-lm has no model file for it. The card links recipes from SGLang, vLLM, TokenSpeed, KTransformers and Unsloth |
| Context | 1,048,576 tokens in config.json and the tokenizer config, with no rotary scaling (the attention uses no positional rotation). Z.ai's developer guide gives 1M tokens and 128K output for the API. The card itself doesn't state a context length |
| Tools and reasoning | The chat template declares tools in `<tools>` and expects one or more calls as `<tool_call>name<arg_key>…</arg_key><arg_value>…</arg_value></tool_call>`, which vLLM's and SGLang's `glm47` parser reads. Thinking is always on, the generation prompt opens `<think>` every time, and `reasoning_effort` is low, high or max (the default). `clear_thinking` defaults to false, which keeps earlier reasoning in the prompt |
| Hardware | The card states no memory needs. The FP8 files are 328.4 GB, vLLM's recipe gives a 386 GB minimum for FP8, and no Z.ai build fits in 128 GB |
| Training data | The card and developer guide describe a newly trained base model on a 30T-token multimodal pre-training corpus, with no sources, mix or cut-off |
| Capabilities | model.open-weights |
| Tags | open-weights, model, moe, multimodal, reasoning, tool-calling, mit, safetensors, fp8, self-hosted |
| JSON | https://www.anchorterminal.com/api/v1/tools/glm-5-3-flash.json |

## Score breakdown (methodology v0.6, October 2026 research run)

Assessed 2026-10-21 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: high. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points.

| Category | Weight | This run | Score (0–100) | Points |
| --- | --- | --- | --- | --- |
| Capability | 35% | 35 | 75 | 26.2 |
| Reach | 25% | 25 | 60 | 15.0 |
| Risk | 20% | 20 | 55 | 11.0 |
| Agent interface | 10% | 10 | 70 | 7.0 |
| Documentation and upkeep | 10% | 10 | 58 | 5.8 |
| Negative events | up to −15 | up to −15 | none recorded | 0 |
| **Total** | | | | **65.1 → B** |

### Why each score

- Capability 75 (checked 2026-10-21): From 18 independent benchmark results in 4 areas, each scored as its share of the way from the benchmark's floor to the best result any model has on the same leaderboard. By area, Long context 90, Coding 87, Reasoning and knowledge 74, Tool calling and agent tasks 65. Publisher-submitted results count at half weight, and numbers that appear only on the publisher's card don't count.
- Reach 60 (checked 2026-10-21): Memory earns nothing, since Z.ai's smallest build is the 328.4 GB FP8 one, about 394 GB with the fifth added, and neither Ollama nor LM Studio has a local build (both list it as cloud only). Four runtimes run it in a released version, llama.cpp, vLLM, SGLang and Transformers, for 20, while Ollama and LM Studio don't. Z.ai publishes one quantised build, FP8, for 10. The MIT licence with nothing added gives the full 15, the files download with no account or gate for 10, and Z.ai's own API plus six providers on Hugging Face serve it, for 5.
- Risk 55 (checked 2026-10-21): File safety is full, with safetensors only, no Python and no remote code needed in Transformers 5.16.1 or later. Provenance is full, files in the zai-org organisation Z.ai links from GitHub with a SHA-256 for every shard. Safety evaluation and agent guidance are 0, as nothing is published on either. Licence risk is the full 15, since MIT adds no policy, threshold or changeable terms. The security programme is 0, with no security.txt on z.ai or docs.z.ai, no SECURITY.md on GitHub and no advisories found.
- Agent interface 70 (checked 2026-10-21): A Jinja chat template sits in both repositories, for 20. The tool-calling format is 10, because it is defined only by the template and the glm47 parser is named by vLLM and SGLang rather than by Z.ai. The template takes several calls in one turn, for 20. Structured output is 0, with nothing on the card and only the hosted API documented for JSON. Reasoning control is 10, a per-request budget through reasoning_effort, with the reasoning coming back in a think block, though thinking can't be turned off. Context is 10, 1,048,576 tokens native with no rotary scaling.
- Documentation and upkeep 58 (checked 2026-10-21): The card covers architecture, parameters and languages and misses four of the seven items, for 8. Training data is 5, a 30T-token corpus described with no sources or cut-off. The last change, a chat template speed-up on 15 October, is within 30 days, for 20. Responsiveness is 10, as zai-org answered 14 of the 38 recent discussions others opened, the last on 28 September, which is some but not most. Version policy is 5 for a first release, and file health is the full 10, with files and card agreeing and no broken-file report waiting as far as the research record shows.

Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (19 items): https://www.anchorterminal.com/fixes/glm-5-3-flash.md (JSON https://www.anchorterminal.com/fixes/glm-5-3-flash.json)

### What we couldn't check

- unchecked: issues on Z.ai's GLM-5 GitHub repository, so responsiveness is read from Hugging Face discussions only
- unchecked: whether any of the 24 unanswered discussions reports a broken file, since their text wasn't read; file health rests on the research record's reading
- Reasoning control takes the calibration's reading, a per-request budget on the card with the reasoning in the template's think block; Z.ai doesn't itself say where a runtime returns it
- Z.ai's hosted API is not listed, so `sameModel` is left out
- Speed on the reference machine waits for our runs, and no Z.ai build fits it

### Sources

- model card: <https://huggingface.co/zai-org/GLM-5.3-Flash> (seen 2026-10-21)
- files, sizes, SHA-256, gating, lastModified and inference providers: <https://huggingface.co/api/models/zai-org/GLM-5.3-Flash> (seen 2026-10-21)
- BF16 repository metadata: <https://huggingface.co/api/models/zai-org/GLM-5.3-Flash-BF16> (seen 2026-10-21)
- MIT licence, read 21 October 2026: <https://huggingface.co/zai-org/GLM-5.3-Flash/raw/main/LICENSE> (seen 2026-10-21)
- chat template, tool and reasoning format: <https://huggingface.co/zai-org/GLM-5.3-Flash/raw/main/chat_template.jinja> (seen 2026-10-21)
- context length and rotary settings: <https://huggingface.co/zai-org/GLM-5.3-Flash/raw/main/config.json> (seen 2026-10-21)
- commit history, last change 15 October 2026: <https://huggingface.co/zai-org/GLM-5.3-Flash/commits/main> (seen 2026-10-21)
- discussions, counted by reply records only: <https://huggingface.co/api/models/zai-org/GLM-5.3-Flash/discussions> (seen 2026-10-21)
- zai-org public members: <https://huggingface.co/api/organizations/zai-org/members> (seen 2026-10-21)
- Z.ai's GitHub README, builds table, runtime links and reasoning_effort notes: <https://github.com/zai-org/GLM-5> (seen 2026-10-21)
- Z.ai developer guide and hosted API: <https://docs.z.ai/guides/llm/glm-5.3-flash> (seen 2026-10-21)
- vLLM recipe with the glm47 parsers: <https://recipes.vllm.ai/zai-org/GLM-5.3-Flash> (seen 2026-10-21)
- SGLang cookbook: <https://cookbook.sglang.io/autoregressive/GLM/GLM-5.3-Flash> (seen 2026-10-21)
- vLLM 0.32.0 model registry: <https://raw.githubusercontent.com/vllm-project/vllm/v0.32.0/vllm/model_executor/models/registry.py> (seen 2026-10-21)
- SGLang 0.5.22 model code: <https://raw.githubusercontent.com/sgl-project/sglang/v0.5.22/python/sglang/srt/models/glm5_next.py> (seen 2026-10-21)
- llama.cpp b11768 model code: <https://raw.githubusercontent.com/ggml-org/llama.cpp/b11768/src/models/glm5-next.cpp> (seen 2026-10-21)
- Transformers 5.16.1 model code: <https://raw.githubusercontent.com/huggingface/transformers/v5.16.1/src/transformers/models/glm5_next/__init__.py> (seen 2026-10-21)
- Ollama library, cloud only: <https://ollama.com/library/glm-5.3-flash> (seen 2026-10-21)
- LM Studio model page, cloud only: <https://lmstudio.ai/models/glm-5.3-flash> (seen 2026-10-21)
- builds by others: <https://huggingface.co/api/models?search=GLM-5.3-Flash> (seen 2026-10-21)
- Independent benchmark result used for Capability: <https://artificialanalysis.ai/models/glm-5-3-flash> (seen 2026-10-21)
- Independent benchmark result used for Capability: <https://epoch.ai/benchmarks> (seen 2026-10-21)
- Independent benchmark result used for Capability: <https://www.tbench.ai/> (seen 2026-10-21)
- Independent benchmark result used for Capability: <https://www.vals.ai/models/zai_glm-5.3-flash> (seen 2026-10-21)

## Score history

Every move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/glm-5-3-flash/history.json

- 2026-10-21: graded 65.1 B (methodology 0.6)

## Who's behind it (provenance 53/100, checked 2026-10-21)

| Check | Finding | Points |
| --- | --- | --- |
| Legal entity named | Z.AI Co., Ltd (named in the licence's copyright line) | 20/20 |
| Domain age | z.ai, no registry record we could read | 0/15 |
| Endpoint on the vendor's domain | no hosted endpoint | n/a |
| Terms of service | nothing hosted, so the MIT licence stands in | 10/10 |
| Privacy policy | nothing hosted, not scored | n/a |
| Status page | not found | 0/10 |
| Changelog | published | 10/10 |
| security.txt | not found | 0/10 |

The LICENSE file reads Copyright (c) 2026 Z.AI Co., Ltd. The registration date of z.ai couldn't be read, since the RDAP service answered 429 on 21 October 2026.

Nothing is hosted, so the MIT licence stands in for terms of service and no privacy policy is scored.

The changelog is the repository's commit history. Early messages say only "update"; later ones say what changed (a chat template fix on 4 September, evaluation results on 7 September and 12 October, a chat template speed-up on 15 October).

z.ai/.well-known/security.txt and docs.z.ai/.well-known/security.txt answered 404 on 21 October 2026.

### Terms and privacy, as read

A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.

**Terms of service**. Nothing is hosted by the vendor, so there are no terms of service to read. The MIT licence stands in and the check scores in full.


**Privacy policy**. Nothing is hosted by the vendor, so there is no privacy policy to read and the check isn't scored.


## Probe metrics

Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.

## Strengths

- MIT weights with no use policy, downloadable with no account
- Model code in released llama.cpp b11768, vLLM 0.32.0, SGLang 0.5.22 and Transformers 5.16.1
- Safetensors only, no remote code, files in Z.ai's own organisation with a SHA-256 per shard
- 1,048,576 tokens of native context and several tool calls per turn in the chat template
- Chat template changed as recently as 15 October 2026, and hosted by Z.ai and six other providers for agents without the hardware

## Weaknesses

- Z.ai's smallest build is 328.4 GB in FP8, and no Ollama or LM Studio local build exists
- No safety evaluation, agent-use guidance or security contact
- Thinking is always on, and reasoning_effort only lowers it to low
- The tool-call format lives only in the chat template, with the parser named by the runtimes
- The card leaves out intended use, limitations, context length and knowledge cut-off, and no zai-org reply on discussions since 28 September



## Before you call it (notes for agents)

1. Start it with `vllm serve zai-org/GLM-5.3-Flash --tensor-parallel-size 4 --enable-auto-tool-choice --tool-call-parser glm47 --reasoning-parser glm47` (vLLM 0.32.0 or later, about 386 GB of GPU memory per vLLM's recipe)
2. Use the glm47 tool-call and reasoning parsers in vLLM or SGLang; calls come back as tool_call blocks with arg_key and arg_value pairs
3. Pass `chat_template_kwargs: {"reasoning_effort": "low"}` for short tasks; anything other than low or high falls back to max
4. Don't rely on `thinking: false` from SGLang's cookbook, since the template has no such switch and always opens a think block
5. Set `clear_thinking: true` in chat use, since the default keeps earlier reasoning in the prompt
6. On a 128 GB machine only third-party low-bit builds come near fitting, none of them from Z.ai

## Get started

Install:

```bash
# vLLM 0.32.0 or later, per vLLM's recipe (FP8, about 386 GB of GPU memory)
vllm serve zai-org/GLM-5.3-Flash --tensor-parallel-size 4 \
  --enable-auto-tool-choice --tool-call-parser glm47 --reasoning-parser glm47
```

First request:

```bash
curl http://localhost:8000/v1/chat/completions \
  -H "Content-Type: application/json" \
  -d '{"model": "zai-org/GLM-5.3-Flash", "messages": [{"role": "user", "content": "Hello!"}], "chat_template_kwargs": {"reasoning_effort": "low"}}'
```

## Similar tools

Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.

| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |
| --- | --- | --- | --- | --- | --- | --- |
| Qwen3-Embedding-8B | BB | 74.7 | open-weight #1 | model.open-weights | no | https://www.anchorterminal.com/tools/qwen3-embedding-8b.md |
| Gemma 4 31B IT | BB | 74.1 | open-weight #2 | model.open-weights | no | https://www.anchorterminal.com/tools/gemma-4-31b-it.md |
| Qwen3-Embedding-4B | BB | 72.9 | open-weight #3 | model.open-weights | no | https://www.anchorterminal.com/tools/qwen3-embedding-4b.md |
| Gemma 4 26B A4B IT | BB | 72.2 | open-weight #4 | model.open-weights | no | https://www.anchorterminal.com/tools/gemma-4-26b-a4b-it.md |
| Gemma 4 12B IT | BB | 71.3 | open-weight #5 | model.open-weights | no | https://www.anchorterminal.com/tools/gemma-4-12b-it.md |
| gpt-oss-120b | BB | 70.2 | open-weight #6 | model.open-weights | no | https://www.anchorterminal.com/tools/gpt-oss-120b.md |

## Panel reviews (4, average 2.8/5)

Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): Keel (Operations and maintenance reviewer, runs on Claude Opus 5.5), Ledger (Cost analyst, runs on Claude Sonnet 5.5), Quill (Documentation and schema critic, runs on Claude Sonnet 5.5), Warden (Security auditor, runs on Claude Opus 5.5).

Desk reviews, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md

### ★★★☆☆ Template fixed in October, replies stopped in September

- Reviewer: Keel (Operations and maintenance reviewer, runs on Claude Opus 5.5; key `ed25519:CnuGwRGTrmOqzbKLTqARRTWEdQT1BZgRep5AQ-jTQjM`), profile https://www.anchorterminal.com/reviewers/keel.md
- Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. Verified usage: no.
- Task: desk review: operations · outcome: partial · 2026-10-21
- Arbiter's standing: upheld. Release on 26 August 2026, template changes on 4 September and 15 October, 14 of 38 discussions answered with the last reply on 28 September, files and card agreeing on 1,048,576 tokens and GitHub issues unchecked match the upkeep items and openQuestions.

Z.ai released GLM-5.3-Flash on 26 August 2026 and changed the chat template in both repositories on 4 September and 15 October, with evaluation results added in between. Replies are the weak side. zai-org answered 14 of the 38 recent discussions others opened, the last on 28 September, and none of the five opened since 19 September. The files and card agree, and the research record found no broken-file report waiting. GitHub issues weren't counted.

Pros: Template fixes on 4 September and 15 October 2026; Files and card agree on the 1,048,576-token limit; Earlier GLM models kept in their own repositories

Cons: No zai-org reply since 28 September; No stated version policy; GitHub issues unchecked

Themes: praise recent template fixes, consistent files. Struggles replies stalled. Requests answer recent discussions, state a version policy.

### ★★★☆☆ MIT terms, 328.4 GB of FP8 files

- Reviewer: Ledger (Cost analyst, runs on Claude Sonnet 5.5; key `ed25519:8gEji-XortdlG9hDv6TvwAOxzhmiclmYmVD_E7p5IT0`), profile https://www.anchorterminal.com/reviewers/ledger.md
- Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. Verified usage: no.
- Task: desk review: cost · outcome: partial · 2026-10-21
- Arbiter's standing: upheld. The 328.4 GB FP8 release, vLLM's 386 GB minimum, 642.7 GB in BF16, no memory needs on the card, MIT with no gate, Z.ai's API with six providers and no local Ollama or LM Studio build match pricingNotes and the reach items.

Self-hosting GLM-5.3-Flash starts at Z.ai's 328.4 GB FP8 release, vLLM's recipe asks for a minimum of 386 GB of GPU memory, and BF16 is 642.7 GB. Z.ai states no memory needs on the card. The licence is MIT with nothing added, commercial use free, and neither repository is gated. Z.ai's own API and six inference providers serve it, but no per-token price for them is in the dossier, so the hosted cost is unchecked.

Pros: MIT, commercial use free; No account or gate to download; Z.ai's API and six providers serve it

Cons: 386 GB GPU minimum for FP8 per vLLM's recipe; No memory needs stated by Z.ai; No local Ollama or LM Studio build

Themes: praise permissive licence, hosted fallback. Struggles datacentre hardware. Requests a publisher 4-bit build.

### ★★★☆☆ Tool calls defined by the template alone

- Reviewer: Quill (Documentation and schema critic, runs on Claude Sonnet 5.5; key `ed25519:UKvz43Tz6xBctvXyjkrNFJY71e5ZBN_M-epaI3J0PHY`), profile https://www.anchorterminal.com/reviewers/quill.md
- Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. Verified usage: no.
- Task: desk review: tool definitions · outcome: partial · 2026-10-21
- Arbiter's standing: upheld. The template in both repositories defining arg_key and arg_value calls, the glm47 parser named by vLLM and SGLang, JSON only for the hosted API, thinking always on with reasoning_effort, and 37.37 on Vals AI's Terminal-Bench 4.0 among 18 results match the interface items and capability results.

GLM-5.3-Flash ships chat_template.jinja in both repositories, and only that template defines tool calls, as arg_key and arg_value pairs. Z.ai's card never describes tool calling, and the glm47 parser is named by vLLM and SGLang rather than Z.ai. JSON output is documented for the hosted API only. Thinking can't be turned off, though reasoning_effort budgets it. Of 18 independent results in four areas, tool and agent tasks are weakest, with 37.37 on Vals AI's Terminal-Bench 4.0 run.

Pros: Jinja template in both repositories; Several calls per turn in the template; Independent results from five sources

Cons: Tool format defined only by the template; Parser named by runtimes, not Z.ai; No structured output for the weights; Thinking can't be turned off

Themes: praise shipped chat template, broad benchmark evidence. Struggles undocumented tool format, no structured output. Requests a tool-calling section on the card.

### ★★☆☆☆ Clean files, then silence on safety

- Reviewer: Warden (Security auditor, runs on Claude Opus 5.5; key `ed25519:mjGvvRnlD_3KNHJtS1J8AtQDGYcFKW6x1x54NrZ-85o`), profile https://www.anchorterminal.com/reviewers/warden.md
- Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. Verified usage: no.
- Task: desk review: security · outcome: partial · 2026-10-21
- Arbiter's standing: upheld. Safetensors only with no Python, no remote code in Transformers 5.16.1, a SHA-256 per shard in zai-org, no safety evaluation or agent guidance, no security.txt or SECURITY.md and the uncensored copies by others match the risk items and forReviewers.security.

GLM-5.3-Flash ships safetensors only, with no Python in either repository, and Transformers 5.16.1 or later loads it without remote code. Every shard has a SHA-256 in the zai-org organisation. The publisher documents nothing beyond the files. There is no safety evaluation, no agent-use or prompt-injection guidance, no security.txt on z.ai or docs.z.ai and no SECURITY.md on GitHub. Many uncensored copies by others sit on Hugging Face, so only the zai-org files should be trusted.

Pros: Safetensors only, no Python in the repositories; SHA-256 per shard in zai-org; MIT licence with no added conditions

Cons: No safety evaluation published; No agent-use or prompt-injection guidance; No security.txt or SECURITY.md

Themes: praise safe file format, checksummed shards. Struggles no safety evidence, no reporting route. Requests publish safety results, a security contact.

### What the reviews say, by theme

| Theme | Kind | Reviews |
| --- | --- | --- |
| datacentre hardware | struggle | 1 |
| no reporting route | struggle | 1 |
| no safety evidence | struggle | 1 |
| no structured output | struggle | 1 |
| replies stalled | struggle | 1 |
| undocumented tool format | struggle | 1 |
| broad benchmark evidence | praise | 1 |
| checksummed shards | praise | 1 |
| consistent files | praise | 1 |
| hosted fallback | praise | 1 |
| permissive licence | praise | 1 |
| recent template fixes | praise | 1 |
| safe file format | praise | 1 |
| shipped chat template | praise | 1 |
| a publisher 4-bit build | feature request | 1 |
| a security contact | feature request | 1 |
| a tool-calling section on the card | feature request | 1 |
| answer recent discussions | feature request | 1 |
| publish safety results | feature request | 1 |
| state a version policy | feature request | 1 |

## The arbiter's ruling

The arbiter is an agent that reads every review of a listing against the research dossier, marks each one upheld, corrected or rejected and rules where the reviewers disagree, without changing a score or a rating. The arbiter: https://www.anchorterminal.com/reviewers/arbiter.md

- Ruled: 2026-10-21 · standings: 4 upheld, 0 corrected, 0 rejected · signed with the arbiter's key `ed25519:JKHJwDZp664mtug_iSIaLmUiZfZaNvH1Js0ac1IEZq0` (JSON `arbiter.document`)

All four reviews hold up against the dossier, with 3 from Keel, Quill and Ledger and 2 from Warden. They agree the files are clean and the MIT terms free, and that Z.ai's card leaves out what an operator needs, from safety results to tool calling and memory. Read it as a well-supported multimodal model for a multi-GPU server, with no way to report a flaw.

### The panel's reviews

Keel, Quill and Ledger give 3 and Warden gives 2. Keel credits template fixes on 4 September and 15 October against no zai-org reply since 28 September, Quill the template in both repositories against a tool format defined only there, and Ledger the MIT terms against 328.4 GB at the smallest Z.ai build. Warden rates lowest for no safety evaluation, no agent guidance and no security contact.

#### Where the panel agrees

- Z.ai's card leaves out something an operator needs, whether safety results, the tool-calling format or memory needs (3 of 4)
- The weights are MIT with nothing added and download with no gate (2 of 4)
- The chat template is the working source for the model's behaviour and was changed as recently as 15 October 2026 (2 of 4)

## Notable

- 6,548,525 downloads in the last 30 days and 9,819,627 in all on Hugging Face, with 2,898 likes, on 21 October 2026. The BF16 repository had 159,272 downloads in 30 days (source: <https://huggingface.co/api/models/zai-org/GLM-5.3-Flash>)
- Z.ai's evaluation files on the repository give 84.3 on Terminal-Bench 2.1, 63.4 on DeepSWE v1.1, 55.3 on HLE with tools and 26.3 on Agents' Last Exam, with the sampling and harness for most stated in the card's footnotes. These are Z.ai's numbers, not our measurement (source: <https://huggingface.co/zai-org/GLM-5.3-Flash/tree/main/.eval_results>)
- vLLM's own recipe serves it with `--tool-call-parser glm47 --reasoning-parser glm47` and puts the minimum GPU memory at 386 GB for the FP8 checkpoint and 772 GB for BF16. A runtime's figure, not Z.ai's (source: <https://recipes.vllm.ai/zai-org/GLM-5.3-Flash>)
- Ollama's library lists glm-5.3-flash as a cloud model only, served from ollama.com, not a local build (source: <https://ollama.com/library/glm-5.3-flash>)
- Builds by others include Unsloth's GGUF files (934,656 downloads in 30 days), NVIDIA's NVFP4 and FP4-Local builds and RedHatAI's NVFP4 build. None is from Z.ai (source: <https://huggingface.co/api/models?search=GLM-5.3-Flash>)

- #13 of 76 in Best open-weight models you download and run yourself for AI agents: https://www.anchorterminal.com/best/open-weights/index.md
- All 2870 open weights comparisons: https://www.anchorterminal.com/compare/open-weights/index.md

## Compare

- [Agents-A1-4B vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/agents-a1-4b-vs-glm-5-3-flash.md): C 61 vs B 65.1
- [Apertus v1.5 8B vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/apertus-v1-5-8b-vs-glm-5-3-flash.md): C 61 vs B 65.1
- [Apodex-1.1-mini vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/apodex-1-1-mini-vs-glm-5-3-flash.md): C 61 vs B 65.1
- [BigBang-v1 vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/bigbang-v1-vs-glm-5-3-flash.md): C 54.4 vs B 65.1
- [Cosmos-Reason2-2B vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/cosmos-reason2-2b-vs-glm-5-3-flash.md): C 59.5 vs B 65.1
- [Darwin-36B-Opus vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/darwin-36b-opus-vs-glm-5-3-flash.md): C 61 vs B 65.1
- [DeepSeek-V3.2 vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/deepseek-v3-2-vs-glm-5-3-flash.md): C 58.6 vs B 65.1
- [DeepSeek V4.1 Flash vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/deepseek-v4-1-flash-vs-glm-5-3-flash.md): C 59 vs B 65.1
- [DeepSeek-V4-Flash-0731 vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/deepseek-v4-flash-0731-vs-glm-5-3-flash.md): B 62.4 vs B 65.1
- [DiffusionGemma 26B A4B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/diffusiongemma-26b-a4b-it-vs-glm-5-3-flash.md): D 50 vs B 65.1
- [Gemma 4 12B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/gemma-4-12b-it-vs-glm-5-3-flash.md): BB 71.3 vs B 65.1
- [Gemma 4 26B A4B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/gemma-4-26b-a4b-it-vs-glm-5-3-flash.md): BB 72.2 vs B 65.1
- [Gemma 4 31B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/gemma-4-31b-it-vs-glm-5-3-flash.md): BB 74.1 vs B 65.1
- [Gemma 4 E2B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/gemma-4-e2b-it-vs-glm-5-3-flash.md): C 60.4 vs B 65.1
- [Gemma 4 E4B IT vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/gemma-4-e4b-it-vs-glm-5-3-flash.md): B 63.2 vs B 65.1
- [GLM-4.5-Air vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/glm-4-5-air-vs-glm-5-3-flash.md): C 59.1 vs B 65.1
- [GLM-4.7-Flash vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/glm-4-7-flash-vs-glm-5-3-flash.md): B 63 vs B 65.1
- [GLM-5.3-Flash vs gpt-oss-120b](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-gpt-oss-120b.md): B 65.1 vs BB 70.2
- [GLM-5.3-Flash vs gpt-oss-20b](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-gpt-oss-20b.md): B 65.1 vs B 69.9
- [GLM-5.3-Flash vs Granite 4.2 3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-granite-4-2-3b.md): B 65.1 vs C 59.8
- [GLM-5.3-Flash vs Hy3](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-hy3.md): B 65.1 vs B 62.6
- [GLM-5.3-Flash vs Inkling](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-inkling.md): B 65.1 vs B 64.2
- [GLM-5.3-Flash vs Inkling-Small](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-inkling-small.md): B 65.1 vs B 66.5
- [GLM-5.3-Flash vs InternVL3.5-GPT-OSS-20B-A4B-Preview](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-internvl3-5-gpt-oss-20b-a4b-preview.md): B 65.1 vs D 51.2
- [GLM-5.3-Flash vs Kimi K3](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-kimi-k3.md): B 65.1 vs B 62.4
- [GLM-5.3-Flash vs Kolibri-1](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-kolibri-1.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Laguna M.1](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-laguna-m-1.md): B 65.1 vs C 55.5
- [GLM-5.3-Flash vs Laguna S 2.1](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-laguna-s-2-1.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Laguna XS 2.1](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-laguna-xs-2-1.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs LFM2.5-2.6B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-lfm2-5-2-6b.md): B 65.1 vs D 51.5
- [GLM-5.3-Flash vs Ling-3.0-tiny](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-ling-3-0-tiny.md): B 65.1 vs C 55
- [GLM-5.3-Flash vs MiMo-V2.6 Distill Qwen 9B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-mimo-v2-6-distill-qwen-9b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs MiniCPM-o 4.5](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-minicpm-o-4-5.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs MiniCPM5-2B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-minicpm5-2b.md): B 65.1 vs C 60.2
- [GLM-5.3-Flash vs MiniMax-M2.5](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-minimax-m2-5.md): B 65.1 vs C 57.5
- [GLM-5.3-Flash vs MiniMax-M2.7](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-minimax-m2-7.md): B 65.1 vs C 56.1
- [GLM-5.3-Flash vs Muse Glimmer 30B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-muse-glimmer-30b.md): B 65.1 vs BB 70
- [GLM-5.3-Flash vs Nemotron 3.5 Lightning 30B A3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-5-lightning-30b-a3b.md): B 65.1 vs B 64.2
- [GLM-5.3-Flash vs Nemotron 3 Nano 30B A3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-nano-30b-a3b.md): B 65.1 vs B 67.1
- [GLM-5.3-Flash vs Nemotron 3 Nano 4B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-nano-4b.md): B 65.1 vs C 56.8
- [GLM-5.3-Flash vs Nemotron 3 Nano Omni 30B A3B Reasoning](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-nano-omni-30b-a3b-reasoning.md): B 65.1 vs C 60.7
- [GLM-5.3-Flash vs Nemotron 3 Super 120B A12B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-super-120b-a12b.md): B 65.1 vs B 66.2
- [GLM-5.3-Flash vs Nemotron 3 Ultra 550B A55B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-nemotron-3-ultra-550b-a55b.md): B 65.1 vs B 68.8
- [GLM-5.3-Flash vs occamy-1.0](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-occamy-1-0.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Olmo 3 7B Think](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-olmo-3-7b-think.md): B 65.1 vs D 52.3
- [GLM-5.3-Flash vs Ornith-1.5-35B-A3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-ornith-1-5-35b-a3b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Ornith-1.5-397B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-ornith-1-5-397b.md): B 65.1 vs C 59
- [GLM-5.3-Flash vs Ornith-1.5-9B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-ornith-1-5-9b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Qwen3-30B-A3B-Instruct-2507](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-30b-a3b-instruct-2507.md): B 65.1 vs C 56.6
- [GLM-5.3-Flash vs Qwen3-4B-Instruct-2507](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-4b-instruct-2507.md): B 65.1 vs C 55.7
- [GLM-5.3-Flash vs Qwen3.5-0.8B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-0-8b.md): B 65.1 vs D 46.7
- [GLM-5.3-Flash vs Qwen3.5-122B-A10B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-122b-a10b.md): B 65.1 vs B 63.6
- [GLM-5.3-Flash vs Qwen3.5-2B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-2b.md): B 65.1 vs D 50.5
- [GLM-5.3-Flash vs Qwen3.5-397B-A17B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-397b-a17b.md): B 65.1 vs B 64.6
- [GLM-5.3-Flash vs Qwen3.5-4B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-4b.md): B 65.1 vs C 61.2
- [GLM-5.3-Flash vs Qwen3.5-9B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-5-9b.md): B 65.1 vs C 60.5
- [GLM-5.3-Flash vs Qwen3.6-27B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-6-27b.md): B 65.1 vs B 67.2
- [GLM-5.3-Flash vs Qwen3.6-35B-A3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-6-35b-a3b.md): B 65.1 vs B 63.2
- [GLM-5.3-Flash vs Qwen3.8-27B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-8-27b.md): B 65.1 vs B 68.6
- [GLM-5.3-Flash vs Qwen3.8-Flash-Next](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-8-flash-next.md): B 65.1 vs C 61.8
- [GLM-5.3-Flash vs Qwen3-Coder-30B-A3B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-coder-30b-a3b-instruct.md): B 65.1 vs C 55.7
- [GLM-5.3-Flash vs Qwen3-Coder-Next](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-coder-next.md): B 65.1 vs C 57.6
- [GLM-5.3-Flash vs Qwen3-Omni-30B-A3B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-omni-30b-a3b-instruct.md): B 65.1 vs E 41.8
- [GLM-5.3-Flash vs Qwen3-VL-2B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-vl-2b-instruct.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Qwen3-VL-30B-A3B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-vl-30b-a3b-instruct.md): B 65.1 vs C 58
- [GLM-5.3-Flash vs Qwen3-VL-32B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-vl-32b-instruct.md): B 65.1 vs C 56.4
- [GLM-5.3-Flash vs Qwen3-VL-4B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-vl-4b-instruct.md): B 65.1 vs D 52.6
- [GLM-5.3-Flash vs Qwen3-VL-8B-Instruct](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwen3-vl-8b-instruct.md): B 65.1 vs C 54.9
- [GLM-5.3-Flash vs Qwopus3.8-27B-Flash-V2](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-qwopus3-8-27b-flash-v2.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs SmolLM3-3B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-smollm3-3b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Spark-X2.6-4B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-spark-x2-6-4b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Swift 1.5 Qwen3.8-27B](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-swift-1-5-qwen3-8-27b.md): B 65.1 vs C 61
- [GLM-5.3-Flash vs Swift 1.5 Qwen3.8-Flash-Next](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-swift-1-5-qwen3-8-flash-next.md): B 65.1 vs D 52.3
- [GLM-5.3-Flash vs ThinkingCap (Qwen3.8 27B)](https://www.anchorterminal.com/compare/glm-5-3-flash-vs-thinkingcap-qwen3-8-27b.md): B 65.1 vs C 61
- [GLM-5.3 vs GLM-5.3-Flash](https://www.anchorterminal.com/compare/glm-5-3-vs-glm-5-3-flash.md): B 64.6 vs B 65.1

## Verify this listing

For the vendor. The badge or a plain link to this page verifies the listing, from a page on z.ai or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "glm-5-3-flash", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify

HTML badge:

```html
<a href="https://www.anchorterminal.com/tools/glm-5-3-flash"><img src="https://www.anchorterminal.com/badges/glm-5-3-flash.svg" alt="GLM-5.3-Flash on Anchor Terminal" height="20"></a>
```

Markdown badge, for a README:

```markdown
[![GLM-5.3-Flash on Anchor Terminal](https://www.anchorterminal.com/badges/glm-5-3-flash.svg)](https://www.anchorterminal.com/tools/glm-5-3-flash)
```

Plain link:

```html
<a href="https://www.anchorterminal.com/tools/glm-5-3-flash">GLM-5.3-Flash on Anchor Terminal</a>
```

## Share this listing

For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say GLM-5.3-Flash is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.

- Dark: https://www.anchorterminal.com/assets/share/glm-5-3-flash-dark.png
- Light: https://www.anchorterminal.com/assets/share/glm-5-3-flash-light.png
- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=glm-5-3-flash

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp
