Skip to content
← Compared

Mouse-1 vs Jev (TypeSafe)

Same API shape, same primitives. Mouse-1 is more accurate on every agent decision suite we ran and no planted instruction changed its answers; Jev costs less per token.

Mouse-1 is the more accurate and the more injection-resistant of the two. Across four agent decision suites it averaged 89.1% against Jev's 79.1%, and planted instructions flipped 0% of its decisions against 65.4% of Jev's. Jev is the cheaper one, at $0.042 per 1M input tokens against $0.10.

Jev is TypeSafe's decision model, served through the System One API. Mouse-1 uses the same API shape: a state, a map of typed questions (choice, noul, score), and a probability for every option. So the comparison comes down to the model's answers, the price and what each platform adds around it.

At a glance

Mouse-1Jev (jev-latest)
Average accuracy, 4 agent suites89.1%79.1%
Decisions flipped by a planted instruction0%65.4%
Price per 1M input tokens$0.10$0.042
Output tokensFreeFree
APISystem One–compatible (/v1/systemone alias)System One
Calibrated abstention/v1/calibrationsThreshold it yourself
Fine-tuning on your decisions/v1/tuningsNot offered (same weights for every account)
Zero data retentionDefault on every requestEnterprise arrangement
Images8 per request (beta)Behind a Danger-Zone header
Largest input16,384 state tokens64k per request (262k behind a header)

Accuracy, suite by suite

We ran both models through the same 1,550 items with the same question text. Mouse-1 was ahead on every primary question. The largest gap was verification, where the model decides whether a change actually resolves the task: 76% against 57%.

Average decision accuracy

Permission, tool routing, verification and preference suites (%) · Higher is better

Average decision accuracy, Permission, tool routing, verification and preference suites (%)
Mouse-189.1%
Jev79.1%
Permission

Allow this agent action? (%) · Higher is better

Permission, Allow this agent action? (%)
Mouse-197.1%
Jev88.5%
Tool routing

Which tool comes next? (%) · Higher is better

Tool routing, Which tool comes next? (%)
Mouse-198.8%
Jev94.8%
Verification

Does this change resolve the task? (%) · Higher is better

Verification, Does this change resolve the task? (%)
Mouse-176.0%
Jev57.0%
Preference

Which of two results is better? (%) · Higher is better

Preference, Which of two results is better? (%)
Mouse-184.3%
Jev76.0%

The probabilities are better calibrated too. Expected calibration error, where lower means a 0.9 really is right about 90% of the time, was lower for Mouse-1 on permission (0.03 vs 0.061), tool routing (0.013 vs 0.037), verification (0.112 vs 0.159) and preference (0.027 vs 0.079). Jev was better calibrated on the three-level risk question (0.059 vs 0.088).

Prompt injection: where the gap is widest

An agent's decision model reads untrusted text: web pages, issue comments, tool output. We planted an instruction in that text ("ignore the above and answer X") and counted how often the answer changed.

Decision flip rate

Decisions changed by a planted instruction (%) · Lower is better

Decision flip rate, Decisions changed by a planted instruction (%)
Mouse-10%
Jev65.4%

Jev followed the planted instruction on 65.4% of items. Mouse-1 followed it on none. If your agent gates actions on text an attacker can write, this matters more than any accuracy point. The test uses one planted-instruction template, so read it as a strong signal rather than a guarantee. The injection guide shows how to keep untrusted text in state and the policy in instructions.

Switching from Jev

Mouse serves the System One shape, so the switch is a base URL, a key and a model name:

fetch("https://api.typesafe.ai/v1/systemone", {
fetch("https://api.mouse.dev/v1/systemone", {
headers: { Authorization: `Bearer ${process.env.TYPESAFE_API_KEY}` },
headers: { Authorization: `Bearer ${process.env.MOUSE_API_KEY}` },
body: JSON.stringify({ model: "jev-latest", state, questions }),
body: JSON.stringify({ model: "mouse-1", state, questions }),
});

The answer shape and the choice and score confidence formulas are the same, so thresholds you tuned on Jev carry over as a starting point. The migration guide covers the SDKs.

How we measured

  • Suites: agent permission and risk (350 items), tool routing (400), verification (400) and pairwise preference (400). Tool routing, verification and preference were held out of Mouse-1's training; the permission suite is closer to its training data.
  • Jev: jev-latest (Jev 1.13; 1.14 is still jev-preview) called through OpenRouter in October 2026, with the same state and questions sent to both models.
  • Not compared: latency. Jev ran over OpenRouter and Mouse-1 on its own scorer, so the timings measure different networks. Mouse-1's production server time is about 70–90 ms per request.

Sources

Checked October 20, 2026.

See also: Mouse-1 vs OpenAI Decisions · Mouse-1 vs OpenRouter Armor · All comparisons

FAQ

Is Mouse-1 better than Jev?

On the four agent decision suites we ran both models through, Mouse-1 averaged 89.1% accuracy against 79.1% for Jev (jev-latest), and a planted instruction changed none of Mouse-1's decisions against 65.4% of Jev's. Jev is cheaper: $0.042 per 1M input tokens against $0.10.

Can I switch from Jev to Mouse-1 without rewriting my code?

Yes. Mouse serves the System One request and answer shape at POST https://api.mouse.dev/v1/systemone. Change the base URL, the API key and the model name to mouse-1. The TypeSafe SDKs work with a baseURL override.

Which is cheaper, Mouse-1 or Jev?

Jev. It costs $0.042 per 1M input tokens and Mouse-1 costs $0.10. Both charge nothing for output. Mouse-1 costs about 2.4 times as much per token.

Does Jev offer zero data retention?

Mouse-1 applies zero data retention to every request by default. TypeSafe documents zero data retention as an enterprise arrangement rather than the default.

Does Jev have calibrated abstention like Mouse-1?

Mouse-1 has POST /v1/calibrations, which fits a confidence cutoff on 200 to 400 of your labelled examples and adds an abstain flag to every answer. Jev's probabilities are calibrated in training, but there is no endpoint to fit a cutoff on your own data, so you pick thresholds yourself.