Why low: partial agreement (43 of 50 strings) with nvidia/nemotron-3.5-content-safety:free only.
NVIDIA: Nemotron 3.5 Content Safety is NVIDIA's model, and its measured tokenizer sits in NVIDIA's own signature group alongside its sibling models. No other maker's measured model shares it so far.
| We checked | What we found | Where it came from |
|---|---|---|
| How it counts tokens | Counted cleanly, and no other model in the catalogue counts the same way | tk_0d9ebf63 |
| How its API is set up | A combination of settings no other listing in the catalogue uses | api_c0dad00e |
| How much it can read and write | Reads up to 131,072 tokens at onceOpenRouter's listing shows 117,964 output tokens, which is 90% of the context window, the figure it carries where the provider declares no maximum. | its own listing |
| Whether it thinks before answering | Reasons when asked to | its own listing |
| Who served our requests | DeepInfra | we measured it, 5 October 2026 |
Click a row to open the full comparison.
We sent NVIDIA: Nemotron 3.5 Content Safety fifty short pieces of text and recorded what each one cost it in tokens. The bars below are those costs. Two models built on the same tokenizer produce the same bars; a model built on a different one produces a different set, which is what makes this a fingerprint.
Overhead subtracted: 464 prompt tokens.
NVIDIA Nemotron 3.5 Content Safety is a compact 4B-parameter multimodal guardrail model from NVIDIA, fine-tuned from Google Gemma-3-4B. It moderates both inputs to and responses from LLMs and VLMs, accepting...
Supported parameters
frequency_penaltyinclude_reasoninglogit_biasmax_tokensmin_ppresence_penaltyreasoningrepetition_penaltyseedstoptemperaturetop_ktop_p
defaults: {"temperature":null,"top_p":null,"top_k":null,"frequency_penalty":null,"presence_penalty":null,"repetition_penalty":null}
