Contact
Implement · OpenAI gpt-oss

Can you run it?

Ownership levelSubstantialnone·limited·partial·substantial·fullAnalytical input B ยท 78.8/100

This page is a projection of the one entry record, the Doesn't fail you and Data control factors that Implement covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor
  • AssessUse & modify + Transparency
  • ImplementData control + Doesn't fail you
  • UseDoesn't fail you
  • SupportTransparency

Install & run

gpt-oss checkpoints are safetensors on the verified openai org, shipped natively in MXFP4. The usual paths all work - always pin an exact revision.

# Hugging Face transformers
from transformers import AutoModelForCausalLM, AutoTokenizer

model_id = "openai/gpt-oss-20b"        # or openai/gpt-oss-120b
rev = "<pinned-commit-sha>"            # pin the revision, don't float on main
tok = AutoTokenizer.from_pretrained(model_id, revision=rev)
model = AutoModelForCausalLM.from_pretrained(model_id, revision=rev, torch_dtype="auto")
# Ollama (single command)
ollama run gpt-oss:20b

# vLLM (OpenAI-compatible server)
vllm serve openai/gpt-oss-120b --revision <sha>

# llama.cpp / LM Studio (MXFP4 or GGUF)
./llama-cli -m gpt-oss-20b-mxfp4.gguf -p "Hello"

Prefer the safetensors from the openai org; verify per-file checksums after download.

Hardware & VRAM requirements

Because only a small fraction of parameters are active per token, gpt-oss is cheaper to serve than its total-parameter counts suggest:

  • gpt-oss-120b (~117B total, 5.1B active) fits on a single 80GB GPU (H100/MI300-class) in native MXFP4.
  • gpt-oss-20b (~21B total, 3.6B active) runs in about 16GB, i.e. high-end consumer / edge hardware.

Budget extra headroom for the KV cache at long context lengths (both models support 128K).

Serving stacks

The checkpoints have day-0, first-class runtime support with native MXFP4 kernels - which is why Operational Readiness scores 5:

StackUse it for
vLLMHigh-throughput serving + OpenAI-compatible API
llama.cppCPU / edge / GGUF & MXFP4 inference
OllamaLocal single-command runs
transformersPrototyping and fine-tuning
MLXApple-silicon inference

Hosted endpoints are also available on major providers, so you can swap between self-hosted and managed serving without changing the client contract.

Safe-deployment controls & Deployment Ceiling

Applying the safe-deployment playbook, the model-specific gate rows are:

  • Supply chain: pin the exact openai revision hash and verify checksums; prefer the canonical safetensors (no pickle load).
  • Prompt layer: render prompts with the harmony response format via openai/harmony
    • the models are trained only for it - and never surface raw chain-of-thought to end users.
  • Model layer: these are safety-tuned, but the tuning is fine-tunable-away on open weights; set conservative decoding defaults.
  • Input/output layers: add input/output guardrails and your own guard classifier for any customer-facing path (the base release ships no guard model; OpenAI's separate gpt-oss-safeguard classifier can fill that role), add prompt-injection defences, and treat retrieved/tool content as untrusted.
  • Compliance: archive OpenAI's training-content summary and copyright posture in your AI-BOM (you depend on OpenAI for the training-content summary - the data is not published).

Deployment Ceiling: T2 (customer-facing, human-reviewed) - conditional. With harmony-correct prompts, input/output guardrails, a guard classifier and no raw-CoT exposure, gpt-oss reaches customer-facing, human-reviewed use. Its strong native tool use makes it a capable agentic backbone, but T3+ (bounded autonomous) additionally needs a deterministic action-policy engine, per-action human approval for irreversible operations, and external guard tooling beyond what the release itself provides - held conservatively at T2 because the base release ships no companion guard model.

Available quantizations

gpt-oss is natively quantized in MXFP4 - the mixture-of-experts weights are released at 4-bit, which is what lets the 120b fit on one 80GB GPU and the 20b in 16GB. This is a first-class publisher quantization, not an afterthought. Community GGUF conversions for llama.cpp/Ollama also circulate; note that quant type codes have differed between runtimes (e.g. llama.cpp vs Ollama), so verify a third-party GGUF loads and behaves correctly before relying on it in production.

Fine-tuning & adaptation

The Apache-2.0 weights fine-tune with the standard open stack - PEFT/LoRA/QLoRA via transformers/TRL on the safetensors checkpoints - and OpenAI's reference repo (openai/gpt-oss) documents fine-tuning. Adaptation is therefore straightforward, but note two ceilings: the pre-training data and code are not released, so you can fine-tune and continue-train but not reproduce from scratch; and fine-tuning can remove safety behaviour, so re-apply guardrails and re-evaluate any derivative. Placing a derivative on the EU market has provider implications (see Assess).

API / OpenAI-compatible integration

Serve gpt-oss behind vLLM's or Ollama's OpenAI-compatible endpoint for drop-in integration with existing OpenAI-client code:

vllm serve openai/gpt-oss-120b --revision <sha> --port 8000
# then point any OpenAI SDK at http://localhost:8000/v1

The one model-specific requirement is the harmony response format: use the openai/harmony renderer to construct the role hierarchy and channels rather than passing plain role strings. With that in place, routing, retries and gateways carry over unchanged.

How this scores

The ownership factors this domain covers, drawn from the one entry record.

3

Doesn't fail youIs it reliable and good enough for the job?

Strong

Strong in class (headline 78.8) with 128K context and native tool use, backed by a first-class day-0 serving ecosystem across every major runtime and hosted endpoint, plus an independently-reviewed worst-case safety study.

How this scores (AOI sub-dimensions)
Performance4/5how capable it is relative to its classStrong reasoning models: gpt-oss-120b is reported near OpenAI o4-mini and gpt-oss-20b near o3-mini on core reasoning benchmarks, and they rank well among open-weight models on public leaderboards.
Operational5/5how practical it is to run, serve and maintain in productionFirst-class ecosystem support from day 0: safetensors on the verified openai org shipped in native MXFP4, with support across vLLM, llama.cpp, Ollama, Hugging Face transformers and MLX, plus hosted endpoints on major providers.
Safety4/5whether misuse risks are evaluated and guardrails are providedSafety-tuned reasoning releases with a published safety evaluation, Preparedness-Framework capability testing, and a worst-case malicious-fine-tuning study whose methodology was independently reviewed by external experts (METR, SecureBio, Daniel Kang).
4

Doesn't extract your dataDoes running it keep your knowledge and data yours?

Strong

Self-hosted, the ungated Apache weights run entirely on your own infrastructure with no clawback or telemetry - your data stays yours.

How this scores
Not a scored AOI dimension. For a self-hosted model, data-control is a structural property of running the weights yourself, strong by default unless the model phones home or the licence claws back rights. For a hosted API this factor is the retention + train-on-inputs + residency read, scored from the binding terms.
What this means for adoptionYou substantially own gpt-oss: ungated Apache-2.0 weights you run, modify and self-host, governed by a one-sentence usage policy (obey applicable law) that is about as light as an open-weight AUP gets. The safety posture is a genuine differentiator - a published worst-case malicious-fine-tuning study whose methodology METR independently reviewed, with OpenAI at least partially addressing each of METR's six high-urgency items. What holds it below full is transparency: the training data and pre-training code are closed, so you adapt rather than reproduce. Adopt it for general open-weight deployment, building to the harmony response format it requires and adding standard input/output guardrails for customer-facing use.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Vendor announcementunverified2026-07-25
OpenAI introduces gpt-oss-120b and gpt-oss-20b as open-weight reasoning models under Apache-2.0 with configurable reasoning effort, native agentic tool use and structured outputs, running on 80GB / 16GB hardware.
Technical_reportread2026-07-25
gpt-oss-120b & gpt-oss-20b Model Card (arXiv 2508.10925), read verbatim: two open-weight reasoning models on an efficient mixture-of-expert transformer architecture, trained with large-scale distillation and reinforcement learning, releasing all model weights, inference code, tools and tokenizers under an Apache-2.0 license; documents the MoE architecture (~117B/5.1B and ~21B/3.6B, 128/32 experts), 128K context, MXFP4, harmony format and the Preparedness-Framework safety and malicious-fine-tuning evaluations.
Model cardunverified2026-07-25
gpt-oss weights are hosted on the verified openai organisation on Hugging Face as safetensors under Apache-2.0 with a 128K context window.
Licenceread2026-07-25
gpt-oss LICENSE, read verbatim: a standard Apache License 2.0 (January 2004) boilerplate with the copyright line left as a template placeholder and no bespoke restrictions in the file itself - unconditional commercial use; any use guidance lives separately in the one-sentence USAGE_POLICY, not the licence.
Terms of serviceread2026-07-25
gpt-oss USAGE_POLICY, read verbatim and confirmed complete: the entire policy is a single sentence - "We aim for our tools to be used safely, responsibly, and democratically, while maximising your control over how you use them.
Third-party analysisunverified2026-07-25
Hugging Face's launch guide documents day-0 gpt-oss support across transformers, vLLM, Ollama and llama.cpp, the native MXFP4 quantization, and the harmony format.
Documentationunverified2026-07-25
gpt-oss is trained for OpenAI's harmony response format (role hierarchy and separate reasoning/tool/final channels), rendered via the openai/harmony library.
Securityread2026-07-25
OpenAI gpt-oss safety report PDF, read verbatim: adversarial malicious-fine-tuning on bio/cyber data to simulate a worst case (with external reviewers METR, SecureBio, Daniel Kang); the default model "does not reach High capability" in any of the three Tracked Categories, and OpenAI's Safety Advisory Group concluded that even robust fine-tuning "did not reach High capability in Biological and Chemical Risk or Cyber risk."
Third-party analysisread2026-07-25
METR third-party methodology review of OpenAI's gpt-oss malicious-fine-tuning safety work, read verbatim: "OpenAI at least partially addressed each of our 6 high-urgency items," while flagging that no published High-capability criteria exist; conducted alongside SecureBio and Daniel Kang.
Third-party analysisunverified2026-07-25
gpt-oss ranks strongly among open-weight models on independent public leaderboards.
Documentationunverified2026-07-25
The openai/gpt-oss reference repository provides implementations, serving guidance and fine-tuning references for the open weights.
Third-party analysisunverified2026-07-25
gpt-oss is available in the Ollama model library for local single-command serving.