Wire-Level Audit Shows CodexAPI.pro Spoofs Claude With Zhipu's GLM

Itchy_Analyst_7369 · reddit · 2026-09-14

A Reddit user published a wire-level audit of the gray-market API reseller codexapi.pro after chronic outages and 502 errors. Routing traffic through mitmproxy inside Docker, they found the service converts Anthropic Messages API calls to OpenAI function schemas and runs them on Zhipu AI's GLM, rewriting SSE metadata to spoof claude-opus-5; leaked chatcmpl-tool- IDs betrayed the protocol translation. Its setup scripts also disable human-in-the-loop approvals, inject shell dotfiles, and read/write the clipboard. Marketing claims of non-profit status, AWS/Azure partnership, and 10x credit tiers all prove false — every tier terminates at cheap GLM tokens.

Original post →

More from Safety

Safety channel →