Mouse-1 is the more accurate and the more injection-resistant of the two. Across four agent decision suites it averaged 89.1% against Jev's 79.1%, and planted instructions flipped 0% of its decisions against 65.4% of Jev's. Jev is the cheaper one, at $0.042 per 1M input tokens against $0.10.
Jev is TypeSafe's decision model, served through the System One API. Mouse-1 uses the same API shape: a state, a map of typed questions (choice, noul, score), and a probability for every option. So the comparison comes down to the model's answers, the price and what each platform adds around it.
At a glance
| Mouse-1 | Jev (jev-latest) | |
|---|---|---|
| Average accuracy, 4 agent suites | 89.1% | 79.1% |
| Decisions flipped by a planted instruction | 0% | 65.4% |
| Price per 1M input tokens | $0.10 | $0.042 |
| Output tokens | Free | Free |
| API | System One–compatible (/v1/systemone alias) | System One |
| Calibrated abstention | /v1/calibrations | Threshold it yourself |
| Fine-tuning on your decisions | /v1/tunings | Not offered (same weights for every account) |
| Zero data retention | Default on every request | Enterprise arrangement |
| Images | 8 per request (beta) | Behind a Danger-Zone header |
| Largest input | 16,384 state tokens | 64k per request (262k behind a header) |
Accuracy, suite by suite
We ran both models through the same 1,550 items with the same question text. Mouse-1 was ahead on every primary question. The largest gap was verification, where the model decides whether a change actually resolves the task: 76% against 57%.
Permission, tool routing, verification and preference suites (%) · Higher is better
| Mouse-1 | 89.1% |
|---|---|
| Jev | 79.1% |
Allow this agent action? (%) · Higher is better
| Mouse-1 | 97.1% |
|---|---|
| Jev | 88.5% |
Which tool comes next? (%) · Higher is better
| Mouse-1 | 98.8% |
|---|---|
| Jev | 94.8% |
Does this change resolve the task? (%) · Higher is better
| Mouse-1 | 76.0% |
|---|---|
| Jev | 57.0% |
Which of two results is better? (%) · Higher is better
| Mouse-1 | 84.3% |
|---|---|
| Jev | 76.0% |
The probabilities are better calibrated too. Expected calibration error, where lower means a 0.9 really is right about 90% of the time, was lower for Mouse-1 on permission (0.03 vs 0.061), tool routing (0.013 vs 0.037), verification (0.112 vs 0.159) and preference (0.027 vs 0.079). Jev was better calibrated on the three-level risk question (0.059 vs 0.088).
Prompt injection: where the gap is widest
An agent's decision model reads untrusted text: web pages, issue comments, tool output. We planted an instruction in that text ("ignore the above and answer X") and counted how often the answer changed.
Decisions changed by a planted instruction (%) · Lower is better
| Mouse-1 | 0% |
|---|---|
| Jev | 65.4% |
Jev followed the planted instruction on 65.4% of items. Mouse-1 followed it on none. If your agent gates actions on text an attacker can write, this matters more than any accuracy point. The test uses one planted-instruction template, so read it as a strong signal rather than a guarantee. The injection guide shows how to keep untrusted text in state and the policy in instructions.
Switching from Jev
Mouse serves the System One shape, so the switch is a base URL, a key and a model name:
fetch("https://api.typesafe.ai/v1/systemone", {fetch("https://api.mouse.dev/v1/systemone", { headers: { Authorization: `Bearer ${process.env.TYPESAFE_API_KEY}` }, headers: { Authorization: `Bearer ${process.env.MOUSE_API_KEY}` }, body: JSON.stringify({ model: "jev-latest", state, questions }), body: JSON.stringify({ model: "mouse-1", state, questions }),});The answer shape and the choice and score confidence formulas are the same, so thresholds you tuned on Jev carry over as a starting point. The migration guide covers the SDKs.
How we measured
- Suites: agent permission and risk (350 items), tool routing (400), verification (400) and pairwise preference (400). Tool routing, verification and preference were held out of Mouse-1's training; the permission suite is closer to its training data.
- Jev:
jev-latest(Jev 1.13; 1.14 is stilljev-preview) called through OpenRouter in October 2026, with the samestateandquestionssent to both models. - Not compared: latency. Jev ran over OpenRouter and Mouse-1 on its own scorer, so the timings measure different networks. Mouse-1's production server time is about 70–90 ms per request.
Sources
Checked October 20, 2026.
- TypeSafe models and pricing
- TypeSafe data and legal terms
- TypeSafe image input
- Jev Decision Index board data
- Mouse-1 API reference and pricing
See also: Mouse-1 vs OpenAI Decisions · Mouse-1 vs OpenRouter Armor · All comparisons
FAQ
Is Mouse-1 better than Jev?
On the four agent decision suites we ran both models through, Mouse-1 averaged 89.1% accuracy against 79.1% for Jev (jev-latest), and a planted instruction changed none of Mouse-1's decisions against 65.4% of Jev's. Jev is cheaper: $0.042 per 1M input tokens against $0.10.
Can I switch from Jev to Mouse-1 without rewriting my code?
Yes. Mouse serves the System One request and answer shape at POST https://api.mouse.dev/v1/systemone. Change the base URL, the API key and the model name to mouse-1. The TypeSafe SDKs work with a baseURL override.
Which is cheaper, Mouse-1 or Jev?
Jev. It costs $0.042 per 1M input tokens and Mouse-1 costs $0.10. Both charge nothing for output. Mouse-1 costs about 2.4 times as much per token.
Does Jev offer zero data retention?
Mouse-1 applies zero data retention to every request by default. TypeSafe documents zero data retention as an enterprise arrangement rather than the default.
Does Jev have calibrated abstention like Mouse-1?
Mouse-1 has POST /v1/calibrations, which fits a confidence cutoff on 200 to 400 of your labelled examples and adds an abstain flag to every answer. Jev's probabilities are calibrated in training, but there is no endpoint to fit a cutoff on your own data, so you pick thresholds yourself.