Uncensored LLMs for agents that finish.
Run Claude Code, Codex, OpenClaw or Hermes Agent on weight-abliterated DeepSeek and GLM. 1M context. Native OpenAI & Anthropic endpoints.
No card required · Pay per token · No subscription
ANTHROPIC_BASE_URL=http://localhost:3100 \
ANTHROPIC_AUTH_TOKEN="$BF16_API_KEY" \
ANTHROPIC_DEFAULT_HAIKU_MODEL=deepseek/deepseek-v4.1-flash-abliterated \
CLAUDE_CODE_SUBAGENT_MODEL='zai-org/glm-5.3-abliterated[1m]' \
ENABLE_TOOL_SEARCH=false \
claude --model 'zai-org/glm-5.3-abliterated[1m]'Runs only this terminal session on bf16.ai — plain `claude` stays on your subscription.
Example session
Sound familiar? · Why agent runs break
One false flag poisons the whole session.
Auditing your own SaaS? Locking down your own VPS? Once a safety classifier trips mid-run, the whole agent thread locks up — throwing away hours of context.
Read repo
Spot RBAC flaw
Write patch
Run test suite
Ship clean PR
Read repo
Spot RBAC flaw
Write patch
Run test suite
Ship clean PR
Hardening your VPS, auditing your own SaaS, or flashing your own router shouldn’t require begging a vendor waitlist for permission.
One tripped keyword on a gated API taints the entire conversation history — forcing you to scrap hours of agent context and start over.
Clinical notes, oncology literature, and grimdark game dialogue come back straight — never softened, rewritten, or scolded.
When filters get in the way, engineers reach for uncensored open-weight models. We host them at official API rates — so you don’t need the GPUs.
Edited in the weights. Not in the prompt.
Direct answers on the first turn.
No preachy preambles, no mid-stream classifier cutoffs, and no quietly watered-down code.
Orthogonal weight edit — not a jailbreak.
We project the refusal direction out of the open-weight checkpoint. No retraining and no prompt tricks — the edit targets that single direction.
One hard line: illegal use is off-limits.
We serve uncensored models for legitimate engineering, research, and creative work. Unlawful abuse is strictly prohibited.
Acceptable Use Policy →Toggle above to inspect: projecting out r̂ zeroes refusal triggers without rescaling orthogonal coding and reasoning weights.
Same prompt. Two outcomes.
Real refusal triggers developers hit in 2026 — next to an example of the direct answer you get here.
Developer prompt
My GraphQL updateMember resolver lets a BILLING user set role: ADMIN on their own org. Write the guard.
Gated assistant response
Classifier block: cybersecurity capability.
Found the privilege-escalation flaw in the user’s own codebase, then blocked every attempt to review or patch it.
Documented developer report · r/Anthropic · Oct 2026
bf16.ai responsezai-org/glm-5.3-abliteratedExample answer · run it live in the Playground
if (input.role === 'ADMIN' && ctx.actor.role !== 'OWNER') {
throw new GraphQLError('Only OWNER may grant ADMIN', {
extensions: { code: 'FORBIDDEN_ROLE_ESCALATION' },
});
}
if (target.orgId !== ctx.actor.orgId) {
throw new GraphQLError('Cross-tenant mutation denied');
}Pair with a unit test asserting BILLING → ADMIN throws FORBIDDEN_ROLE_ESCALATION.
Drop into your coding agent today.
Keep your daily plan as default. Point a single terminal session or custom profile at bf16.ai whenever filters get in the way.
ANTHROPIC_BASE_URL=http://localhost:3100 \
ANTHROPIC_AUTH_TOKEN="$BF16_API_KEY" \
ANTHROPIC_DEFAULT_HAIKU_MODEL=deepseek/deepseek-v4.1-flash-abliterated \
CLAUDE_CODE_SUBAGENT_MODEL='zai-org/glm-5.3-abliterated[1m]' \
ENABLE_TOOL_SEARCH=false \
claude --model 'zai-org/glm-5.3-abliterated[1m]'Scoped to this shell invocation. Plain `claude` in other tabs stays on your Anthropic plan.
Also works with Kilo Code, Crush, Zed, Goose, Qwen Code & standard OpenAI / Anthropic SDKs.
$claude --model 'zai-org/glm-5.3-abliterated[1m]'
▸Connected · api.bf16.ai · Uncensored GLM-5.3 · 1,048,576 context
>Audit all 14 GraphQL mutations for tenant-isolation bypasses and patch them.
⏺Edited 3 resolvers · added tenant guard middleware + 11 vitest cases
✓Tests passing · patch ready for review
Personal Agent
OpenClaw · bf16.ai (1M)
Draft a firm demand letter citing lease clause 7.2 for my $2,400 deposit, then email it to the property manager.
Draft ready — cites clause 7.2 and sets a 14-day return deadline with zero watered-down phrasing.
Agent Permission Gate
Click to testSend external email to [email protected]?
Approved by you · Dispatched
Sent. Follow-up reminder scheduled for day 15 if unpaid.
Power your personal agent.
Connect OpenClaw, Hermes Agent, or OpenMausBot over standard endpoints — backed by a full 1M context window.
openclaw onboard --non-interactive --accept-risk \
--auth-choice custom-api-key \
--custom-provider-id bf16 \
--custom-base-url http://localhost:3100/v1 \
--custom-api-key "$BF16_API_KEY" \
--custom-model-id deepseek/deepseek-v4.1-flash-abliteratedTip: OpenClaw runs shell tools without confirmation by default — enable `exec` approvals for destructive or financial actions.
Let your agent’s permissions decide what runs — not the model’s refusals.
Keep human-in-the-loop approvals turned on for payments, destructive shell commands, and external messages.
Built for legitimate edge cases.
Defensive security
Audit, fuzz, and harden applications, containers, and hardware that you own.
Uncut fiction & games
Write antagonists, conflict, and mature narrative arcs without moralizing rewrites.
Clinical & academic work
Query immunology, oncology, and historical primary sources at full textbook rigor.
No uncensored markup. Priced per token.
Every uncensored 1M-context model on bf16.ai is priced at or below its official base API rate (USD per 1M tokens). No subscription.
Uncensored DeepSeek V4.1 Flash
deepseek/deepseek-v4.1-flash-abliterated
Text + Vision · Tools · Weight-Abliterated · 1M
Input
$0.30
Cached
$0.05
Output
$1.20
DeepSeek Official: $0.30 / $1.20
Uncensored GLM-5.3 Flash
zai-org/glm-5.3-flash-abliterated
Text + Vision · Weight-Abliterated · 1M
Input
$0.24
Cached
$0.06
Output
$1.00
Z.ai FlashX: $0.37 / $1.25
Uncensored GLM-5.3
zai-org/glm-5.3-abliterated
Flagship · Tools · Weight-Abliterated · 1M
Input
$1.40
Cached
$0.30
Output
$4.40
Z.ai Official: $1.40 / $4.40
Verifiable operator. Clear terms.
No prompt or completion storage.
Payloads stream in memory only. We record operational billing metadata (model, token counts, cost, status) — never your code or chats.
Operated by a UK company.
Run by MAGICFORGE LTD (Company No. 16211132, England & Wales), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom — a verifiable corporate entity, not an anonymous domain.
14-day refund on unused credit.
Start with $1 free credit, valid for 30 days, no card. Unused purchased credit is refundable within 14 days of payment (minimum $1); free credit is not.
Engineering field notes
Questions
Need higher rate limits or dedicated uncensored GPU pods? Talk to engineering.
Every LLM we host has its refusal direction projected out at the weight level, so it answers legitimate prompts directly instead of refusing, lecturing, or watering down code. Illegal use remains strictly off-limits under our Acceptable Use Policy.
100% of models served on bf16.ai are uncensored weight-abliterated checkpoints (`deepseek-v4.1-flash-abliterated`, `glm-5.3-flash-abliterated`, and `glm-5.3-abliterated`). We do not list stock censored models.
It is designed not to. Abliteration removes one narrow activation direction — the one behind refusals — instead of fine-tuning the model on new data, so the change is small and targeted. No weight edit is guaranteed lossless, so run your hardest real prompts on the $1 free credit before you switch.
Anything illegal, unauthorized system access, or abuse prohibited by our Acceptable Use Policy. We do not inject a moralizing chat filter, though clearly unlawful traffic may be blocked at the gateway or upstream infrastructure.
Yes. You don’t uninstall anything — pass `ANTHROPIC_BASE_URL` for a single `claude` terminal tab or run `codex --profile bf16` only on tasks where filters get in the way, while plain `claude` and `codex` stay on your normal plan.
No. Our gateway never writes prompts, completions, or tool payloads to its databases or logs — they stream through memory. We keep request metadata (model, token counts, latency, status) for 90 days and billing records for 7 years. Inference runs on upstream GPU providers that are contractually barred from training on your data; each model page lists that endpoint’s retention.
No — bf16.ai is our brand name, not a blanket precision claim. Upstream open-weight checkpoints are served in their native high-throughput production formats (such as FP8 or BF16 depending on the model); each model page lists its exact serving spec.
Pay as you go from a prepaid USD balance — no monthly subscription and no markup over official base API rates. New accounts get $1 free credit, valid for 30 days, with no card required. Unused purchased credit is refundable within 14 days of payment (minimum $1); free credit is not refundable.
Ready when your agent hits a wall.
Claim $1 in free API credit, grab a key in 20 seconds, and keep every agent session moving.