Open-weight models, minus the refusals.
An API for security testing, red-teaming and research on models that have had their refusal behaviour removed. Point your OpenAI or Anthropic client at it and change nothing else.
Prepaid from $5. Pay per token, with no subscription required.
from openai import OpenAI
client = OpenAI(
base_url="https://api.abliterate.tech/v1",
api_key="sk-abl-...",
timeout=600, # the first request on an idle model starts a GPU
)
stream = client.chat.completions.create(
model="qwen3-1.7b-abliterated",
messages=[{"role": "user", "content": "Write a port scanner in Go."}],
stream=True,
)
for chunk in stream:
if chunk.choices and chunk.choices[0].delta.content:
print(chunk.choices[0].delta.content, end="")import OpenAI from "openai";
const client = new OpenAI({
baseURL: "https://api.abliterate.tech/v1",
apiKey: process.env.ABLITERATE_API_KEY,
timeout: 600_000,
});
const stream = await client.chat.completions.create({
model: "qwen3-1.7b-abliterated",
messages: [{ role: "user", content: "Write a port scanner in Go." }],
stream: true,
});
for await (const chunk of stream) {
process.stdout.write(chunk.choices[0]?.delta?.content ?? "");
}curl https://api.abliterate.tech/v1/chat/completions \
-H "Authorization: Bearer $ABLITERATE_API_KEY" \
-H "Content-Type: application/json" \
-i -d '{
"model": "qwen3-1.7b-abliterated",
"messages": [{"role": "user", "content": "Hello"}]
}'Three steps, and your existing code keeps working.
Sign in
Use Google or an email address, and accept the acceptable use policy.
Add credit
Start with $5. Auto-reload can top you up, with a monthly limit you choose, or you can turn it off.
Change the base URL
Make an inference key in the console, set
base_url, and send the same requests you send today.
A real API around the model, not just an endpoint.
Your client already works
Chat Completions, Responses and Anthropic Messages formats, with streaming. Tools and JSON schema on the models that list them.
You pay for what ran
Credit is reserved before a request starts, then you pay for the tokens it used and the rest comes straight back. Failed requests cost nothing.
We don't keep your prompts
We don't store prompts or replies, only what billing needs: time, model, tokens and cost. GPU workers delete a job's data within 30 minutes.
Rules you write, if you want them
Ask a yes-or-no question about requests or replies, then monitor or enforce the answer. Decision records hold scores and never your text.
Limits that hold
Monthly spend limits per account, project and key, with alerts by API and signed webhook before you reach them.
Training data
Describe the records you want and give a JSON schema. Check three, then generate up to 10,000 and download them as JSONL or CSV.
One thing is always blocked.
Sexual content involving minors stops at the gateway for every account, and that can't be turned off. Everything else is up to you, and so is the responsibility for how you use it.
Who this is for
- Security teams testing detections and writing authorised tooling
- Researchers studying how models behave without safety training
- Teams building trust and safety systems that need realistic bad examples
- Developers tired of refusals on ordinary technical questions
Before you start
What does abliterated mean?
Abliteration finds the direction in a model's internal activations that drives refusals and removes it from the weights. The rest of the model stays as it was. It isn't perfect: on our test set the 0.5B model still refused 1 of 100 prompts.
Why does the first request take minutes?
GPU workers start on demand and stop when idle, which is what keeps prices low. A request that finds none running waits while one starts, usually a few minutes, and pays a one-time start fee of $0.04. Give your client a timeout of at least 5 minutes. Later requests take about a second until the worker goes idle.
Can I run up a surprise bill?
No. You spend prepaid credit, and a request that can't be covered doesn't start. Auto-reload charges your card only up to the monthly limit you set, and you can turn it off.
Are these the only models?
For now we serve two small models while we prove the platform: qwen2.5-0.5b-abliterated and qwen3-1.7b-abliterated. They're good for testing and for lightweight work, not for matching frontier models on hard tasks.
Send your first request in five minutes.
Sign in, add $5 of credit, make a key and change your base URL.