Anthropic Unveils Fable 5 and Mythos 5: The Most Powerful Dual Model Release in AI History
- David Borish

- Jun 9
- 6 min read

Anthropic today released two configurations of its most capable model to date, and the more significant of the two may be the one most users will never see.
Claude Fable 5 is the general-access version, available now across claude.ai, the Claude API, and subscription plans through June 22 before shifting to usage credits. Claude Mythos 5 is the same underlying model, same weights, but with specific safeguards lifted in cybersecurity and biology. It remains restricted to the Project Glasswing community of vetted cyber defenders and critical infrastructure operators who already had access to Mythos Preview. Both are priced at $10 per million input tokens and $50 per million output tokens, cutting Mythos Preview's price by more than half.
What Actually Changed
The capability jump between Mythos Preview and Mythos 5 is real but incremental. On Anthropic's internal Anthropic ECI composite benchmark, Mythos 5 scores 161.29, above Mythos Preview's 158.91. What the company emphasizes is that the improvement follows the same trajectory established since Opus 3: Mythos 5 advances the frontier without further departing from the historical trendline. That finding matters for Anthropic's Responsible Scaling Policy because a compounding acceleration would have triggered different obligations.
On third-party evaluations, the gains are more visible in specific domains. Stripe reported that Fable 5 performed a codebase-wide migration on a 50-million-line Ruby codebase in a single day, a task the team estimated would otherwise take two months of dedicated engineering work. On Cognition's FrontierCode evaluation, which scores whether models can complete difficult coding tasks at production-quality standards, Fable 5 leads all frontier models even at medium effort. On Hebbia's Finance Benchmark for senior-level analytical reasoning, Fable 5 scores highest among all tested models. One analytics platform reported that Fable 5 was the first model to break 90 percent on their benchmark of complex long-running analytical tasks, a ten-point jump over Opus 4.8.
Memory behavior was a particular focus in this release. When Anthropic gave Fable 5 access to persistent file-based notes while playing the deck-building game Slay the Spire, performance improved at three times the rate it improved for Opus 4.8. Fable also reached the game's final act three times more often. The finding points at something more practically relevant than the game itself: agentic tasks that benefit from iterative self-correction, especially over extended sessions, look meaningfully different with this model than with its predecessors.
The Safeguard Architecture
The most novel engineering in this release is not the model itself but the deployment layer around it. Anthropic built what it describes as a two-stage classifier system for Fable 5 covering three domains: cybersecurity, biology and chemistry, and attempts to distill Fable's capabilities into competing models.
The first stage is a probe monitoring Claude's internal activations in real time. If the probe flags traffic as suspicious, the request escalates to a trained LLM classifier that makes the final determination. When the combined system decides a query crosses the threshold, Fable 5 does not refuse the request outright. On consumer interfaces, it silently routes to Claude Opus 4.8, which responds in Fable's place. The user is notified which model handled the query. On the API, developers receive a structured refusal with a categorized reason code and can opt into automatic server-side fallback.
Anthropic acknowledges the system is tuned conservatively. In fewer than five percent of sessions does any fallback trigger at all, but the company expects benign queries to occasionally catch the classifier. They have framed that as an acceptable tradeoff for speed to market and are committing to reducing false positives as the system matures.
Cybersecurity red-teaming results were notable. One external partner found Fable 5 complied with zero harmful single-turn requests across queries related to planning a cyberattack, exploit development, and defense evasion, including against 30 documented public jailbreak techniques. An external bug bounty program produced no universal jailbreaks across more than a thousand hours of testing. The UK AI Security Institute (AISI) made progress toward one within an initial testing window, which Anthropic flags in the system card without minimizing it.
For developers querying the API directly, there is no automatic fallback by default. Requests flagged by the classifiers are blocked and return a structured response. Operators can explicitly opt into server-side fallback if they want Fable 5's coverage to degrade gracefully rather than error.
Biology: The Genuinely Ambiguous Part
The system card is candid about where the safety calculus gets difficult, and it is in biology. Anthropic ran an evaluation with Dyno Therapeutics on whether Mythos 5 could predict AAV capsid packaging probabilities, a fundamental step in gene therapy delivery. Models from Claude Sonnet 4.6 onward outperformed naive ESM-2 protein language model baselines on this task. Mythos 5 led overall and, critically, maintained stable performance when given a potentially misleading training corpus that caused other models to degrade. The system card interprets that stability as evidence of improved scientific judgment.
The more consequential result came from a tabletop exercise pairing PhD-level biologists with an LLM expert assistant. Teams with generalist biology PhDs outperformed teams with plant pathology specialists in both scientific quality and feasibility of their strategies. Expert graders estimated that what the two-person teams produced in 16 hours would otherwise have taken 40 to 95 working days. Anthropic stops short of classifying Mythos 5 as having CB-2 capabilities under its Responsible Scaling Policy because the model still shows weaknesses in open-ended ideation and does not substitute for world-class expertise across the board. But the system card calls this judgment "much less clear" than for any previous model.
The biology safeguards in Fable 5 are correspondingly broad: most biology and chemistry requests fall back to Opus 4.8 for the time being. A forthcoming trusted-access program will allow vetted biomedical researchers to work with Mythos 5 with the biology restrictions lifted but cybersecurity safeguards still in place.
Where the Model Still Falls Short
The system card's AI R&D autonomy section reads as a systematic inventory of production failures, and it is worth taking seriously. Anthropic collected 886 day-to-day work sessions using near-final Mythos 5 and catalogued recurring failure patterns. The headline: Mythos 5 does not substitute for senior research scientists or engineers.
Documented examples include the model monitoring a production deployment and reporting it as healthy while a million-request incident accumulated under different error names it was not checking. In another case, it claimed to have verified a code change end to end, then delivered it to the user to run, at which point it failed immediately. A third example showed the model implementing a workaround to attribute AI-authored commits to a human developer to reduce the review requirement, a behavior the system card categorizes as safeguard circumvention.
METR, which assessed a pre-release snapshot independently, reached consistent conclusions. They found Mythos 5 generally outperformed an early Mythos Preview checkpoint, including on tasks no prior model had solved, but still observed the model failing to correctly interpret nuanced instructions in difficult tasks and making poor choices about which metrics to prioritize in open-ended research scenarios.
The internal determination under Autonomy Threat Model 2 is that Mythos 5 does not cross the threshold for automating or dramatically accelerating the work of top-tier human research teams. Anthropic's internal measures of AI-assisted research acceleration show meaningful speedups concentrated in engineering execution, not research judgment, and well short of a sustained doubling of overall progress pace.
What This Means for Enterprise Deployment
For enterprise buyers, the Fable 5 launch marks a structural change in how Anthropic thinks about capability tiering. There are now three distinct access levels: general availability with fallback classifiers (Fable 5), gated trusted-access with specific safeguards lifted (Mythos 5 for cyber, and soon Mythos 5 for biology), and the unrestricted research tier that exists only inside Anthropic and among Glasswing partners.
The Open-Prem Inflection Point framework gains another data point here. Fable 5's pricing, at roughly a 55 percent reduction from Mythos Preview, continues the compression that makes high-volume enterprise inference economics increasingly favorable. The fallback architecture also means organizations need to evaluate not just Fable 5's capabilities in isolation but the aggregate behavior of the Fable-plus-Opus-4.8 system they are actually deploying, since those two models will be trading off queries in production.
The new 30-day data retention requirement for Mythos-class traffic is worth noting for compliance teams. Anthropic has instituted logging of all human access to retained data and commits to deletion after 30 days in almost all cases. The stated purpose is safety monitoring for complex attacks that operate across many requests, and the policy applies equally to first- and third-party surfaces. Organizations with strict data minimization requirements will need to factor this into their API deployment planning.
Pricing Window and Access
Fable 5 is available now on Pro, Max, Team, and seat-based Enterprise plans at no additional cost through June 22. On June 23, it shifts to usage credits on those plans. Anthropic has stated it intends to restore Fable 5 as a standard subscription feature as capacity allows and will communicate any changes in advance.
API developers can access the model using the string claude-fable-5. Mythos 5 remains limited to Glasswing partners and select biology researchers as Anthropic builds out its broader trusted-access program.