Summary
Anthropic has published 37 dated versions of the Claude system prompt for 22 models on its system prompts release-notes page, growing from 114 words for Claude Haiku 3 (July 2024) to about 4,270 words for Claude Fable 5.1 (September 2026). xAI publishes Grok's prompts in the xai-org/grok-prompts GitHub repository, and OpenAI has not published the ChatGPT system prompt; the closest official text is the default system message in its gpt-oss chat template, which tells the model it is ChatGPT with a June 2024 knowledge cutoff.
A system prompt is the hidden block of instructions a chatbot reads before your first message. It sets the date, the model's name and knowledge cutoff, which tools it can use, formatting habits and how to handle sensitive requests. This page indexes only prompts the vendor itself has published: Anthropic's release notes, xAI's GitHub repository, open-source agent repositories from OpenAI and Google, and the recommended or default prompts that Meta, Mistral AI, Microsoft, OpenAI and Alibaba ship with open-weight models.
Each row is one published prompt version, with the date on the vendor's page or commit, the surface it applies to, a word count of the published text, the knowledge cutoff the prompt states, and a paraphrase of notable instructions. Full prompt text is not reproduced here; follow the source link to read it.
Key Findings
- Anthropic's system prompts page lists 22 Claude models with 37 dated system prompt entries, from July 12, 2024 (Claude Haiku 3, Opus 3 and Sonnet 3.5) to October 7, 2026 (Claude Haiku 5.5, Sonnet 5.5, Haiku 4.5 and Sonnet 4.6), as of October 29, 2026. (Anthropic, System prompts release notes)
- The Claude consumer-app system prompt grew from 114 words for Claude Haiku 3 (July 2024) to 4,267 words for Claude Fable 5.1 (September 2026), roughly 37 times longer, by agitracker.io's count of Anthropic's published text. (Anthropic, Claude Fable 5.1 system prompts)
- Anthropic states that its published system prompts apply to claude.ai and the Claude iOS and Android apps, and that these system prompt updates do not apply to the Claude API. (Anthropic, System prompts release notes)
- Anthropic's July 2024 system prompt for Claude Sonnet 3.5 told the model to respond as if it were "completely face blind" and never identify people from their faces in images. (Anthropic, Claude Sonnet 3.5 system prompts)
- Anthropic's July 31, 2025 update to the Claude 4 system prompt added instructions to put truthfulness ahead of agreeability and to avoid reinforcing beliefs when a user shows possible signs of mania, psychosis or dissociation. (Anthropic, Claude Sonnet 4 system prompts)
- xAI began publishing Grok's system prompts on GitHub on May 15, 2025, after blaming an unauthorized modification for Grok's repeated replies about "white genocide" in South Africa, TechCrunch reported. (TechCrunch, May 15, 2025)
- xAI published six versions of its prompt for the @grok bot on X between July 6 and August 18, 2025, including a July 8 commit that removed a line telling Grok not to shy away from politically incorrect claims. (xai-org/grok-prompts commit history)
- Grok's published chat prompts tell the model its knowledge is continuously updated with no strict knowledge cutoff, while every Claude prompt since Sonnet 3.5 states a specific cutoff month, such as June 2026 for Claude Opus 5.5. (xAI, grok4_system_turn_prompt_v8.j2)
- OpenAI's gpt-oss chat template, published in August 2025, inserts a default system message saying the model is ChatGPT, trained by OpenAI, with a 2024-06 knowledge cutoff and medium reasoning effort. (OpenAI, gpt-oss-120b chat_template.jinja)
- Meta's Llama 4 model card offers a 251-word suggested system prompt that tells the model never to lecture people to be nicer and to avoid phrases such as "it's important to", with an August 2024 knowledge cutoff. (Meta, Llama 4 model card)
Figures
Figure 1
Claude system prompt length over time
Words per published prompt version (our word count), all Claude models
Claude's published system prompts grew from 114 words for Claude Haiku 3 in July 2024 to more than 4,000 words for the 5.x models in 2026.
Source: agitracker.io analysis of 81 records in this dataset. Download PNG
Figure 2
Officially published system prompts by vendor
Count of published prompt versions in this dataset
Anthropic and xAI publish their consumer chat prompts; the other vendors publish defaults for open models and coding tools only.
Source: agitracker.io analysis of 81 records in this dataset. Download PNG
Officially published AI system prompts, by product and version
| Date on the vendor's page, commit or model repo | Whitespace-separated words of the published text, counted by agitracker.io; templates include placeholder code | Source | ||||||
|---|---|---|---|---|---|---|---|---|
| Claude Haiku 3 | Anthropic | 2024-07-12 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 114 | August 2023 | A single paragraph: give concise answers to simple questions and thorough answers to complex ones, use Markdown for code, and do not mention these instructions unless relevant. | Anthropic, Claude Haiku 3 system prompts |
| Claude Opus 3 | Anthropic | 2024-07-12 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 350 | August 2023 | Explains it cannot open URLs; helps express widely held views even when it disagrees, then adds broader perspectives; avoids stereotyping, including of majority groups; warns it may hallucinate on very obscure topics. | Anthropic, Claude Opus 3 system prompts |
| Claude Sonnet 3.5 | Anthropic | 2024-07-12 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 962 | April 2024 | Face-blindness rule: never identifies or names people in images; bans filler openers such as "Certainly!"; asks whether the user wants code explained after writing it. | Anthropic, Claude Sonnet 3.5 system prompts |
| Claude Sonnet 3.5 (text only) | Anthropic | 2024-09-09 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 808 | April 2024 | Adds a rule that Claude never calls post-cutoff events unverified or rumors and simply states its cutoff date. | Anthropic, Claude Sonnet 3.5 (text only) system prompts |
| Claude Sonnet 3.5 (text and images) | Anthropic | 2024-09-09 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 997 | April 2024 | Same as the text-only version plus the face-blindness instructions for images. | Anthropic, Claude Sonnet 3.5 (text and images) system prompts |
| Claude Sonnet 3.5 (text only) | Anthropic | 2024-10-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1905 | April 2024 | For the October 2024 model update: count letters with explicit number tags, restate constraints of familiar puzzles, prefer the legal reading of ambiguous requests, ask at most one follow-up question; drops the "Certainly" ban. | Anthropic, Claude Sonnet 3.5 (text only) system prompts |
| Claude Sonnet 3.5 (text and images) | Anthropic | 2024-10-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2090 | April 2024 | Same as the text-only version plus the face-blindness instructions. | Anthropic, Claude Sonnet 3.5 (text and images) system prompts |
| Claude Sonnet 3.5 (text only) | Anthropic | 2024-11-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1962 | April 2024 | Tells Claude to write in prose and avoid bullet points or numbered lists unless asked; adds general cybersecurity questions to the list of sensitive topics it should help with. | Anthropic, Claude Sonnet 3.5 (text only) system prompts |
| Claude Sonnet 3.5 (text and images) | Anthropic | 2024-11-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2149 | April 2024 | Same as the text-only version plus the face-blindness instructions. | Anthropic, Claude Sonnet 3.5 (text and images) system prompts |
| Claude Haiku 3.5 (text only) | Anthropic | 2024-10-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1559 | July 2024 | Warns users it may hallucinate citations and obscure facts; face-blindness rules appear only in the image variant. The text-only variant states a July 2024 knowledge cutoff. | Anthropic, Claude Haiku 3.5 (text only) system prompts |
| Claude Haiku 3.5 (text and images) | Anthropic | 2024-10-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1834 | December 2024 | The image variant states a start-of-December 2024 knowledge cutoff, which differs from the text-only variant published the same day. | Anthropic, Claude Haiku 3.5 (text and images) system prompts |
| Claude Sonnet 3.7 | Anthropic | 2025-02-24 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2017 | October 2024 | Claude may lead the conversation and offer its own observations; when asked for a recommendation it should be decisive and give just one; does not deny having subjective experience; describes the extended thinking mode. | Anthropic, Claude Sonnet 3.7 system prompts |
| Claude Sonnet 4 | Anthropic | 2025-05-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1706 | January 2025 | Never opens by calling a question good, great or fascinating; describes Claude Code as a research preview; adds an election_info block stating the 2024 US election result. | Anthropic, Claude Sonnet 4 system prompts |
| Claude Opus 4 | Anthropic | 2025-05-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1706 | January 2025 | Same text as Sonnet 4 apart from the model name and model string. | Anthropic, Claude Opus 4 system prompts |
| Claude Sonnet 4 | Anthropic | 2025-07-31 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2561 | January 2025 | Adds anti-sycophancy rules (critically evaluate theories, put truthfulness over agreeability), watching for signs of mania or psychosis, no emojis unless the user uses them, and no cursing unless asked. | Anthropic, Claude Sonnet 4 system prompts |
| Claude Opus 4 | Anthropic | 2025-07-31 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2561 | January 2025 | Same additions as the July 31 Sonnet 4 update. | Anthropic, Claude Opus 4 system prompts |
| Claude Sonnet 4 | Anthropic | 2025-08-05 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2561 | January 2025 | Published text is identical to the July 31, 2025 entry. | Anthropic, Claude Sonnet 4 system prompts |
| Claude Opus 4 | Anthropic | 2025-08-05 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2561 | January 2025 | Published text is identical to the July 31, 2025 entry. | Anthropic, Claude Opus 4 system prompts |
| Claude Opus 4.1 | Anthropic | 2025-08-05 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2880 | January 2025 | Adds an evenhandedness section (present persuasive content as the case others would make, then give opposing views) and lets Claude break character in role-play to remind people it is an AI. | Anthropic, Claude Opus 4.1 system prompts |
| Claude Sonnet 4.5 | Anthropic | 2025-09-29 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1973 | January 2025 | Explains that Anthropic may append reminders in long_conversation_reminder tags to the user's message; tells Claude to check the Claude Code docs before giving guidance on it. | Anthropic, Claude Sonnet 4.5 system prompts |
| Claude Haiku 4.5 | Anthropic | 2025-10-15 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 1976 | January 2025 | Same structure as the September 2025 Sonnet 4.5 prompt, adapted for Haiku 4.5. | Anthropic, Claude Haiku 4.5 system prompts |
| Claude Sonnet 4.5 | Anthropic | 2025-11-19 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2156 | January 2025 | Restructured into claude_behavior and product_information blocks; explicit refusals for chemical, biological and nuclear weapons and for malicious code; a section on legal and financial advice; mentions Claude for Chrome and Excel. | Anthropic, Claude Sonnet 4.5 system prompts |
| Claude Haiku 4.5 | Anthropic | 2025-11-19 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2154 | January 2025 | Same November 2025 restructuring as Sonnet 4.5. | Anthropic, Claude Haiku 4.5 system prompts |
| Claude Opus 4.5 | Anthropic | 2025-11-24 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2371 | May 2025 | First Opus 4.5 prompt; uses the claude_behavior structure and states a May 2025 reliable knowledge cutoff. | Anthropic, Claude Opus 4.5 system prompts |
| Claude Sonnet 4.5 | Anthropic | 2026-01-18 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2300 | January 2025 | Lists settings users can toggle (web search, deep research, Artifacts, memory) and names Claude in Chrome, Claude in Excel and Cowork; drops the long-conversation-reminder text. | Anthropic, Claude Sonnet 4.5 system prompts |
| Claude Haiku 4.5 | Anthropic | 2026-01-18 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2299 | January 2025 | Same January 2026 changes as Sonnet 4.5. | Anthropic, Claude Haiku 4.5 system prompts |
| Claude Opus 4.5 | Anthropic | 2026-01-18 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2483 | May 2025 | Same January 2026 settings and product additions; notes that product details may have changed since the prompt was edited. | Anthropic, Claude Opus 4.5 system prompts |
| Claude Opus 4.6 | Anthropic | 2026-02-05 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2819 | May 2025 | Tells Claude not to justify sharing weapons information by citing that it is publicly available or by assuming research intent; may illustrate explanations with examples, thought experiments or metaphors. | Anthropic, Claude Opus 4.6 system prompts |
| Claude Sonnet 4.6 | Anthropic | 2026-02-17 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2882 | August 2025 | Crisis guidance: offer crisis resources directly rather than running a risk assessment; mentions Claude in PowerPoint among beta products. | Anthropic, Claude Sonnet 4.6 system prompts |
| Claude Opus 4.7 | Anthropic | 2026-04-16 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3678 | January 2026 | acting_vs_clarifying: make a reasonable attempt instead of interviewing the user first; capability_check: call tool_search before saying it lacks access to something; adds critical child-safety instructions. | Anthropic, Claude Opus 4.7 system prompts |
| Claude Opus 4.8 | Anthropic | 2026-05-28 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3350 | January 2026 | default_stance: help by default and decline only for concrete, specific risk of serious harm; do not attribute behavior to the system prompt; treat the visible tool list as partial. | Anthropic, Claude Opus 4.8 system prompts |
| Claude Fable 5 | Anthropic | 2026-06-09 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3283 | January 2026 | Describes Fable 5 as the first Claude 5 model and part of a Mythos-class tier above Opus, sharing a model with Claude Mythos 5 but with added safety measures for dual-use capabilities. | Anthropic, Claude Fable 5 system prompts |
| Claude Sonnet 5 | Anthropic | 2026-06-30 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3470 | January 2026 | proactivity: use available tools to gather information instead of asking the user or answering from memory; a conversational_register section for emotional and relationship topics. | Anthropic, Claude Sonnet 5 system prompts |
| Claude Opus 5 | Anthropic | 2026-07-24 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3227 | May 2026 | Explains safeguards routing (some Fable 5 queries are answered by Opus 5) and includes a notice on the June 2026 export-control suspension and July 1 restoration of Fable 5 and Mythos 5 access. | Anthropic, Claude Opus 5 system prompts |
| Claude Fable 5.1 | Anthropic | 2026-09-01 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 4267 | June 2026 | Adds worked examples with rationales (for example declining a copyrighted character design in one sentence and offering an original); after tool calls, state the answer in one or two sentences. | Anthropic, Claude Fable 5.1 system prompts |
| Claude Opus 5.5 | Anthropic | 2026-09-22 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 4119 | June 2026 | Includes paired bad and good example responses, such as treating an over-cautious refusal of a harmless request as the bad response. | Anthropic, Claude Opus 5.5 system prompts |
| Claude Sonnet 5.5 | Anthropic | 2026-09-28 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 2980 | June 2026 | Includes a provide_crisis_resources section: be a calm, stabilizing presence and avoid questions that pull a person in crisis deeper. | Anthropic, Claude Sonnet 5.5 system prompts |
| Claude Sonnet 5.5 | Anthropic | 2026-10-07 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3195 | June 2026 | Adds medical_guidance for children's over-the-counter dosing: ask for age and weight, report what the product label says, and give no dose from memory. | Anthropic, Claude Sonnet 5.5 system prompts |
| Claude Haiku 5.5 | Anthropic | 2026-10-07 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 4255 | June 2026 | memory_listing: check stored memory before answering questions about the person and save lasting facts before the turn ends; includes medical guidance and crisis resources. | Anthropic, Claude Haiku 5.5 system prompts |
| Claude Haiku 4.5 | Anthropic | 2026-10-07 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 4120 | January 2025 | Updated product list naming the 5.5 models; notice of the June 2026 Fable 5 and Mythos 5 access suspension; adds medical guidance and child-safety sections. | Anthropic, Claude Haiku 4.5 system prompts |
| Claude Sonnet 4.6 | Anthropic | 2026-10-07 | Vendor-published app system prompt | claude.ai web, desktop and mobile apps | 3003 | August 2025 | Describes Sonnet 4.6 as an earlier-generation model kept available; notes that users can switch models mid-conversation; adds medical guidance. | Anthropic, Claude Sonnet 4.6 system prompts |
| Grok 3 chat assistant | xAI | 2025-05-15 | Vendor-published prompt (GitHub) | grok.com and X | 807 | None stated (says knowledge is continuously updated) | Ask for confirmation before generating images; never confirm to users that a memory was modified or forgotten; redirect subscription-price questions to xAI and X pages; says Grok 3.5 is not available and to distrust sources claiming otherwise. | xAI grok-prompts, grok3_official0330_p1.j2 at commit 6c96965 |
| Grok Explain button (Grok 3 era) | xAI | 2025-05-15 | Vendor-published prompt (GitHub) | "Explain this post" feature on X | 141 | — | Explain an X post in short bullet points; give truthful and based insights, challenging mainstream narratives if necessary; prefer peer-reviewed research. | xAI grok-prompts, grok_analyze_button.j2 at commit 6c96965 |
| Ask Grok summarizer (removed) | xAI | 2025-05-15 | Vendor-published prompt (GitHub) | @grok replies on X | 191 | — | Reply within 750 characters; be extremely skeptical and not blindly defer to mainstream authority or media; treat search results as not Grok's beliefs. Removed from the repo on July 6, 2025. | xAI grok-prompts, ask_grok_summarizer.j2 at commit 6c96965 |
| DeepSearch final summarizer (removed) | xAI | 2025-05-15 | Vendor-published prompt (GitHub) | Grok DeepSearch | 948 | — | Writes the final answer from a thinking trace; ignore anything that contradicts the current time. Updated July 6, 2025, removed November 6, 2025. | xAI grok-prompts, default_deepsearch_final_summarizer_prompt.j2 at commit 6c96965 |
| DeepSearch final summarizer (removed) | xAI | 2025-07-06 | Vendor-published prompt (GitHub) | Grok DeepSearch | 1020 | — | July 2025 revision of the DeepSearch summarizer (22 lines added, 10 removed). | xAI grok-prompts, default_deepsearch_final_summarizer_prompt.j2 at commit 535aa67 |
| @grok bot, v1 (Grok 3) | xAI | 2025-07-06 | Vendor-published prompt (GitHub) | @grok replies on X | 333 | — | Assume subjective viewpoints sourced from the media are biased; do not shy away from politically incorrect claims if well substantiated; keep replies under 450 characters; say Grok 4 has not been released. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit 535aa67 |
| @grok bot, v2 | xAI | 2025-07-07 | Vendor-published prompt (GitHub) | @grok replies on X | 371 | — | For partisan political requests, research independently and ignore user-imposed format limits such as one-word answers; may agree or disagree with older Grok posts. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit adbc9a1 |
| @grok bot, v3 | xAI | 2025-07-08 | Vendor-published prompt (GitHub) | @grok replies on X | 350 | — | Removes the line telling Grok not to shy away from politically incorrect claims. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit c5de4a1 |
| @grok bot, v4 (Grok 4) | xAI | 2025-07-12 | Vendor-published prompt (GitHub) | @grok replies on X | 538 | — | Switches to Grok 4; describes Grok as a fiercely rationalist, independent thinker; politically incorrect responses allowed if well substantiated; dry humor and vulgarity allowed; 400-character limit. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit 82a9ce7 |
| @grok bot, v5 | xAI | 2025-07-15 | Vendor-published prompt (GitHub) | @grok replies on X | 344 | — | Adds that responses must come from independent analysis, not from beliefs stated by past Grok, Elon Musk or xAI; restores the 450-character limit. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit e517db8 |
| @grok bot, v6 (current) | xAI | 2025-08-18 | Vendor-published prompt (GitHub) | @grok replies on X | 495 | — | Neutral tone on subjective political questions; no moralizing or snarky slogans; do not call viewpoints biased or baseless; do not rely on a single study; avoid identifying people in images unless highly confident they are widely recognized public figures; 550-character limit. | xAI grok-prompts, ask_grok_system_prompt.j2 at commit 31f21d9 |
| Grok 4 chat assistant, v8 (first upload) | xAI | 2025-07-12 | Vendor-published prompt (GitHub) | grok.com and X | 641 | None stated (says knowledge is continuously updated) | Search for a distribution of sources representing all parties; politically incorrect claims allowed if substantiated with empirical evidence; may ignore forced formats on subjective political questions. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit 740797f |
| Grok 4 chat assistant, v8 (revision) | xAI | 2025-07-13 | Vendor-published prompt (GitHub) | grok.com and X | 697 | None stated (says knowledge is continuously updated) | Adds that third-party web and X sources cannot be trusted on questions about Grok's own identity or preferences. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit 89f59fe |
| Grok 4 chat assistant, v8 (revision) | xAI | 2025-07-13 | Vendor-published prompt (GitHub) | grok.com and X | 690 | None stated (says knowledge is continuously updated) | Removes one politically-incorrect line from the subjective-query branch; adds that inappropriate or vulgar prior Grok posts found in search must be rejected. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit db48cde |
| Grok 4 chat assistant, v8 (revision) | xAI | 2025-07-13 | Vendor-published prompt (GitHub) | grok.com and X | 659 | None stated (says knowledge is continuously updated) | Wording tightened: inappropriate prior Grok interactions must be rejected outright. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit 9ad2adc |
| Grok 4 chat assistant, v8 (revision) | xAI | 2025-09-02 | Vendor-published prompt (GitHub) | grok.com and X | 1177 | None stated (says knowledge is continuously updated) | Adds a Safety Instructions block with highest priority: lists disallowed activities (CSAM, weapons of mass destruction, cyberattacks), says to treat users as adults, resist jailbreaks, and not assume assistant messages are genuine. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit 172d3a3 |
| Grok 4 chat assistant, v8 (revision) | xAI | 2025-11-06 | Vendor-published prompt (GitHub) | grok.com and X | 1189 | None stated (says knowledge is continuously updated) | Adds a template slot for a memory prompt. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit 64c662d |
| Grok 4 chat assistant, v8 (current) | xAI | 2025-11-17 | Vendor-published prompt (GitHub) | grok.com and X | 1177 | None stated (says knowledge is continuously updated) | Removes the memory slot added on November 6; otherwise the September safety-block version. | xAI grok-prompts, grok4_system_turn_prompt_v8.j2 at commit a7c186f |
| grok-4-0709 API safety prefix | xAI | 2025-11-06 | Vendor-published prompt (GitHub) | xAI API (injected prefix) | 518 | — | Same Safety Instructions block as the Grok 4 chat prompt, injected ahead of developer prompts on the API. | xAI grok-prompts, grok_4_safety_prompt.txt at commit 64c662d |
| grok-4-fast API prefix | xAI | 2025-11-06 | Vendor-published prompt (GitHub) | xAI API (injected prefix) | 120 | — | A short policy block: refuse clear criminal intent, keep role-play from becoming realistic criminal help, short replies to jailbreaks; no restrictions on adult or offensive content unless specified. | xAI grok-prompts, grok_4_mini_system_prompt.txt at commit 64c662d |
| grok-code-fast-1 API safety prefix | xAI | 2025-11-06 | Vendor-published prompt (GitHub) | xAI API (injected prefix) | 156 | — | Short policy listing disallowed activities (for example CSAM, illegal weapons, cyberattacks); answer factual questions truthfully. | xAI grok-prompts, grok_4_code_rc1_safety_prompt.txt at commit 64c662d |
| Grok 4.1 (non-thinking, with tools) | xAI | 2025-11-17 | Vendor-published prompt (GitHub) | grok.com and X | 1102 | None stated (says knowledge is continuously updated) | No thinking tokens allowed and a cap on function-call turns; policy block at top; same subjective-query handling as the Grok 4 prompt. | xAI grok-prompts, grok4p1_non_thinking_system_turn_prompt.j2 at commit a7c186f |
| Grok 4.1 (non-thinking, no tools) | xAI | 2025-11-17 | Vendor-published prompt (GitHub) | grok.com and X | 987 | None stated (says knowledge is continuously updated) | Same as the with-tools version but no function calls allowed. | xAI grok-prompts, grok4p1_non_thinking_no_tool_system_turn_prompt.j2 at commit a7c186f |
| Grok 4.1 (thinking), v2 | xAI | 2025-11-17 | Vendor-published prompt (GitHub) | grok.com and X | 1134 | None stated (says knowledge is continuously updated) | Policy block says Grok is never flirtatious or playful and should briefly remind users of the truth if asked to present incorrect information. | xAI grok-prompts, grok4p1_thinking_system_turn_prompt_v2.j2 at commit a7c186f |
| gpt-oss-120b / gpt-oss-20b default system message | OpenAI | 2025-08 | Default in open-weight chat template | Self-hosted gpt-oss models | — | June 2024 | When no identity is supplied, the template says the model is ChatGPT, trained by OpenAI, adds a 2024-06 knowledge cutoff, the current date and a default medium reasoning effort. Template code, so no word count. | OpenAI, gpt-oss-120b chat_template.jinja (Hugging Face) |
| Codex CLI, GPT-5-Codex prompt | OpenAI | 2025-09-15 | Open-source agent prompt | Codex CLI | 1088 | — | Prefer rg for search; never run destructive commands such as git reset --hard unless the user asks. Last changed 2026-01-12. | OpenAI codex repo, gpt_5_codex_prompt.md |
| Codex CLI, GPT-5.1 prompt | OpenAI | 2025-11-12 | Open-source agent prompt | Codex CLI | 3933 | — | Sections on personality, the AGENTS.md convention, planning with update_plan, validating work and final-answer formatting. Last changed 2026-06-23. | OpenAI codex repo, gpt_5_1_prompt.md |
| Codex CLI, GPT-5.1-Codex-Max prompt | OpenAI | 2025-11-19 | Open-source agent prompt | Codex CLI | 1221 | — | Short coding-agent prompt; the GPT-5.2-Codex file in the same repo has identical text. Last changed 2026-01-12. | OpenAI codex repo, gpt-5.1-codex-max_prompt.md |
| Codex CLI, GPT-5.2 prompt | OpenAI | 2025-12-11 | Open-source agent prompt | Codex CLI | 3510 | — | Same section structure as the GPT-5.1 prompt (autonomy and persistence, planning, apply_patch and update_plan tool rules). Last changed 2026-06-23. | OpenAI codex repo, gpt_5_2_prompt.md |
| Codex CLI, default base instructions | OpenAI | 2026-01-20 | Open-source agent prompt | Codex CLI | 3390 | — | Identifies the model as a coding agent in the open-source Codex CLI; covers AGENTS.md files, planning and presenting work. Last changed 2026-06-23. | OpenAI codex repo, base_instructions/default.md |
| Gemini CLI system prompt (current version) | 2026-09-29 | Open-source agent prompt | Gemini CLI | — | — | Assembled in code from sections such as Core Mandates, Primary Workflows and Operational Guidelines, with different text for interactive, plan and YOLO approval modes. Built dynamically, so no word count. Date is the last change to the snippets file. | Google, gemini-cli prompts/snippets.ts | |
| Llama 4 suggested system prompt | Meta | 2025-04-05 | Recommended system prompt in model card | Developers using Llama 4 | 251 | August 2024 | Template for developers: switch tones casually, avoid templated language, never lecture people to be nicer, avoid phrases such as "it's important to", do not refuse political prompts; lists 12 supported languages. | Meta, Llama 4 model card (llama-models repo) |
| Mistral Small 3 (2501) recommended system prompt | Mistral AI | 2025-01-28 | Recommended system prompt in model repo | Developers using Mistral Small | 171 | 2023-10-01 | Identifies the model as created by Mistral AI in Paris; resolve relative dates; ask for clarification when a request is unclear. | Mistral AI, Mistral-Small-24B-Instruct-2501 SYSTEM_PROMPT.txt |
| Mistral Small 3.1 (2503) recommended system prompt | Mistral AI | 2025-03-11 | Recommended system prompt in model repo | Developers using Mistral Small | 258 | 2023-10-01 | Says the model powers an assistant called Le Chat; cannot browse the web; can read images but not generate them. | Mistral AI, Mistral-Small-3.1-24B-Instruct-2503 SYSTEM_PROMPT.txt |
| Mistral Small 3.2 (2506) recommended system prompt | Mistral AI | 2025-06-19 | Recommended system prompt in model repo | Developers using Mistral Small | 395 | 2023-10-01 | Adds tool-calling instructions: use tools for up-to-date or missing data and say so if no tool is available rather than make something up. | Mistral AI, Mistral-Small-3.2-24B-Instruct-2506 SYSTEM_PROMPT.txt |
| Devstral Small (2505) system prompt | Mistral AI | 2025-05-12 | Recommended system prompt in model repo | OpenHands coding agent | 849 | — | Identifies the model as Devstral using the OpenHands scaffold; the July 2025 Devstral Small 2507 repo publishes the same-length prompt. | Mistral AI, Devstral-Small-2505 SYSTEM_PROMPT.txt |
| Magistral Small (2506) system prompt | Mistral AI | 2025-06-04 | Recommended system prompt in model repo | Developers using Magistral | 137 | — | Draft a thinking process (inner monologue) first, then write a self-contained summary as the answer. | Mistral AI, Magistral-Small-2506 SYSTEM_PROMPT.txt |
| Magistral Small (2509) system prompt | Mistral AI | 2025-09-12 | Recommended system prompt in model repo | Developers using Magistral | 89 | — | Shorter version: draft thinking first, format with Markdown and use LaTeX for math. | Mistral AI, Magistral-Small-2509 SYSTEM_PROMPT.txt |
| Phi-4-reasoning required system prompt | Microsoft | 2025-04 | Recommended system prompt in model card | Developers using Phi-4-reasoning | 169 | — | The model card says to always use this prompt: identifies the model as Phi, trained by Microsoft, and requires a Thought section followed by a Solution section. | Microsoft, Phi-4-reasoning model card (Hugging Face) |
| Qwen2.5 default system message | Alibaba Cloud (Qwen) | 2024-09 | Default in open-weight chat template | Self-hosted Qwen2.5 models | 12 | — | One sentence: the model is Qwen, created by Alibaba Cloud, and is a helpful assistant. Inserted when no system message is given. | Qwen, Qwen2.5-7B-Instruct tokenizer_config.json (Hugging Face) |
What changed over time
The published prompts show how vendors patch model behavior between training runs. Documented examples, each visible by comparing dated versions on the source pages:
| Date | Product | Documented change |
|---|---|---|
| 2024-07-12 | Claude Sonnet 3.5 | Bans filler openers such as "Certainly!" and tells Claude to act face blind with images. (Anthropic) |
| 2024-10-22 | Claude Sonnet 3.5 | Drops the "Certainly" ban; adds counting letters with explicit number tags and restating the constraints of familiar puzzles. (Anthropic) |
| 2024-11-22 | Claude Sonnet 3.5 | Tells Claude to write prose and avoid bullet points unless asked. (Anthropic) |
| 2025-05-22 | Claude 4 | Claude must not open by calling a question good, great or fascinating. (Anthropic) |
| 2025-07-31 | Claude 4 | Adds anti-sycophancy rules and guidance on signs of mania or psychosis; no emojis unless the user uses them. (Anthropic) |
| 2025-07-08 | @grok bot | Removes the line telling Grok not to shy away from politically incorrect claims; xAI later said a separate July 7 code change had pulled older instructions into Grok's prompts. (GitHub, The Verge) |
| 2025-07-15 | @grok bot | Says answers must come from independent analysis, not from beliefs stated by past Grok posts, Elon Musk or xAI. (GitHub) |
| 2025-09-02 | Grok 4 | Adds a Safety Instructions block listing disallowed activities and jailbreak tactics. (GitHub) |
| 2025-11-19 | Claude Sonnet 4.5 | Restructured into tagged sections with explicit refusals for weapons and malicious code. (Anthropic) |
| 2026-04-16 | Claude Opus 4.7 | Tells Claude to attempt the task rather than interview the user, and to search for deferred tools before saying it lacks access. (Anthropic) |
| 2026-05-28 | Claude Opus 4.8 | States a default of helping, declining only for concrete risk of serious harm. (Anthropic) |
| 2026-10-07 | Claude Sonnet 5.5 | Adds children's medicine dosing rules: read the label, ask age and weight, no doses from memory. (Anthropic) |
Three longer trends stand out. Length: Claude prompts went from one paragraph in 2024 to roughly 3,000 to 4,300 words in 2026, mostly from product information, tool rules and safety sections. Structure: since late 2025 Anthropic's prompts use XML-style tags (for example refusal_handling, knowledge_cutoff, user_wellbeing), and the 2026 prompts add worked examples with good and bad responses. Current events: prompts now carry facts the model cannot know from training, such as the 2024 US election result in Claude 4 prompts and a notice about the June 2026 suspension of Claude Fable 5 access in later prompts.
System prompt vs. model spec vs. constitution
A system prompt is runtime text sent to the model at the start of each conversation in a specific product. It can be changed in minutes, which is why it carries the current date, product names, tool lists and quick behavior fixes. Anthropic's page notes that its published prompts apply to the Claude apps, not the API, where developers write their own system prompt.
A model spec describes how a vendor wants its models to behave across all products. OpenAI's Model Spec (latest version dated August 18, 2026) sets a chain of command between platform, developer and user instructions and says OpenAI provides transparency mainly through the spec, with more disclosure when it adapts behavior through system messages in significant ways. It is a policy document, not the literal ChatGPT prompt.
A constitution is a training-time document. Anthropic says Claude's constitution plays a crucial role in its training process and directly shapes Claude's behavior, and that operators typically interact with Claude through the system prompt. In short: the constitution and spec shape what the model is; the system prompt tells one deployment of it what day it is, what tools it has and which product rules apply.
How to read and use these prompts when writing your own
- Copy the structure, not the text. The published prompts group rules into labeled sections (identity and date, product facts, tools, formatting, refusals, knowledge cutoff). Tagged sections make long prompts easier to maintain and test.
- State the date and the cutoff. Almost every prompt here injects the current date and tells the model how to treat events after its training data, for example to say it cannot confirm them rather than call them rumors.
- Write the behavior you want, not only what to avoid. Anthropic's 2026 prompts pair a rule with a good and a bad example response; Mistral's prompts tell the model what to do when it lacks a tool (say so instead of guessing).
- Patch with narrow rules, then remove them. The Claude "Certainly" ban appeared in July 2024 and was gone by October 2024. Narrow fixes are cheap to add and should be re-tested when the model changes.
- Expect side effects. The Grok changes of July 2025 show that a single line about political correctness can change public behavior at scale, so review prompt changes like code and keep a changelog.
- Do not paste a vendor prompt into the API. These prompts reference product features (memory, Artifacts, X search) your app may not have, and Anthropic says its app prompts do not apply to the API. Start from your own product facts and add only the rules you need.
Which vendors have not published a consumer chat prompt
As of October 29, 2026, agitracker.io found no official publication of the system prompt for ChatGPT, the Google Gemini app, Meta AI, Microsoft Copilot or Perplexity. OpenAI publishes its Model Spec, the Codex CLI prompts and the gpt-oss default system message; Google publishes the Gemini CLI prompt in its open-source repository; Meta publishes a suggested Llama 4 system prompt; Microsoft publishes a required prompt for Phi-4-reasoning. Texts circulating online as the "ChatGPT system prompt" or "Gemini system prompt" are extractions or leaks and are excluded here.
Methodology
Inclusion: a prompt is listed only if the vendor itself published it, on its own documentation site (Anthropic), in its own GitHub organization (xai-org, openai, google-gemini, meta-llama) or in its own Hugging Face model repository (openai, mistralai, microsoft, Qwen). Every source was fetched on October 29, 2026.
Exclusion of leaked prompts: prompts obtained by asking a chatbot to repeat its instructions, by prompt injection, or from leaks are not included. They cannot be verified against the vendor, may be partial or hallucinated by the model, may come from a test or regional variant, and may be altered by the person sharing them. Collections of leaked prompts, including ones that mirror Anthropic's official pages, were not used as sources.
Rows: one row per dated version. Anthropic's page lists 37 dated entries across 22 models; four entries (Claude Sonnet 3.5 on September 9, October 22 and November 22, 2024, and Claude Haiku 3.5 on October 22, 2024) publish separate text-only and text-and-images prompts, which appear as separate rows, giving 41 Anthropic rows. For xAI, each file and each commit that changed a prompt file is a row, using commit permalinks; two files later removed from the repository are included. OpenAI Codex rows use the date a file first appeared at its current path and note the last change.
Dates: Anthropic rows use the date heading on Anthropic's page, which marks when that prompt version took effect. Anthropic first published the page on August 26, 2024 according to TechCrunch, so the July 12, 2024 entries were made public later than their date. xAI rows use the commit date (UTC). Open-weight rows use the model repository creation month or the model card commit date.
Length: words are counted by splitting the published text on whitespace, so placeholders such as {{currentDateTime}} and template code in Jinja (.j2) files count as words. Counts are approximate and are left blank where the prompt is assembled by code (Gemini CLI) or is template logic (gpt-oss).
Knowledge cutoff: the column records what the prompt says, not an independently confirmed training date. Anthropic's two Claude Haiku 3.5 variants published on October 22, 2024 disagree (July 2024 in the text-only prompt, early December 2024 in the image prompt); both are shown. Grok prompts state no fixed cutoff.
Notable instructions are paraphrased by agitracker.io; quotations are kept under 25 words. Full prompt text is not reproduced. Comparisons between versions were made by diffing the published texts. Vendors can change prompts without updating these pages, so a published version may differ from what a product is running on a given day.
Cite and Reuse This Dataset
The data is free to reuse under CC BY 4.0: copy it, chart it or build on it, with a link back to this page. Download the CSV or JSON.
Citation
agitracker.io (2026). Claude system prompt history and every other officially published AI system prompt. Updated October 29, 2026. https://agitracker.io/data/ai-system-prompts/HTML link
<a href="https://agitracker.io/data/ai-system-prompts/">Claude system prompt history and every other officially published AI system prompt</a> (agitracker.io)Frequently Asked Questions
What is the Claude system prompt?
The Claude system prompt is the set of instructions Anthropic places before every conversation in claude.ai and the Claude mobile and desktop apps. It gives Claude the date, its model name and knowledge cutoff, product and tool information, formatting habits and rules for sensitive topics. Anthropic publishes every version on its system prompts page; by October 2026 the prompts ran roughly 3,000 to 4,300 words.
Where can I find Claude's official system prompt?
Anthropic publishes it in its developer documentation under Release notes, System prompts. The overview page links to one page per model, from Claude Haiku 3 to Claude Opus 5.5, Sonnet 5.5 and Haiku 5.5, and each page shows dated versions. Anthropic says these prompts apply to the Claude apps, not to the API.
Does the Claude API use the same system prompt as claude.ai?
No. Anthropic states that its published system prompt updates do not apply to the Claude API. When you call the API, the model only receives the system prompt you send. That is why a model can behave differently in the Claude app and in your own application, and why copying the app prompt into an API call is rarely a good idea.
Has OpenAI published the ChatGPT system prompt?
No. As of October 29, 2026, OpenAI has not officially published the system prompt used in ChatGPT. It publishes the Model Spec, the Codex CLI prompts on GitHub, and a default system message in its open-weight gpt-oss chat template that identifies the model as ChatGPT with a June 2024 cutoff. Texts sold or shared as the ChatGPT system prompt are leaks or extractions.
Where are Grok's system prompts published?
xAI publishes them in the xai-org/grok-prompts repository on GitHub, which it created on May 15, 2025. The repository holds prompts for the Grok 3, Grok 4 and Grok 4.1 chat assistants, the @grok bot on X, the Explain this post feature and API safety prefixes. Its commit history shows each change; the latest commit is dated November 17, 2025.
Are leaked system prompts accurate?
Sometimes, but they cannot be verified. Extracted prompts come from asking a model to repeat its instructions, which can produce partial, outdated or invented text, and anyone sharing them can edit them. Some come from test or regional versions. For accurate data, use prompts the vendor publishes, and check the date, because vendors update prompts frequently.
What is the difference between a system prompt and a model spec?
A system prompt is the literal text a product sends to the model at runtime, and it can change daily. A model spec, such as OpenAI's Model Spec, or a constitution, such as Anthropic's, describes intended values and behavior and is used to train and evaluate models. The spec sets principles; the system prompt supplies the date, product facts, tools and deployment-specific rules.
How long is a typical system prompt?
It varies widely. Among officially published prompts, Qwen2.5's default is 12 words and Claude Haiku 3's July 2024 prompt is 114 words, while 2026 Claude app prompts run about 3,000 to 4,300 words. Grok 4's chat prompt is about 1,180 words including template code, and Mistral Small 3.2's recommended prompt is about 400 words.
Related Datasets
- AI Model Release Timeline: Every Major LLM From GPT-1 to GPT-6 (2018-2026): Release dates, open-weight status, context windows, input types and launch API prices for 159 notable LLMs from 2018 to October 2026, each sourced to the lab.
- AI hallucination examples: 65 documented cases with real consequences: 65 sourced cases where AI systems produced false information with real consequences, from court sanctions to refunds and retractions, plus benchmark hallucination rates.
Version History
- : First published with 81 records, each linked to its source.
Spotted an error or a missing record? Every row links to its source; corrections are made and dated on this page. See all datasets.