Pre-launch preview. Payments run in test mode, so nothing is really charged, and models aren't kept running.

abliterate

Open-weight models, minus the refusals.

An API for security testing, red-teaming and research on models that have had their refusal behaviour removed. Point your OpenAI or Anthropic client at it and change nothing else.

Prepaid from $5. Pay per token, with no subscription required.

from openai import OpenAI

client = OpenAI(
    base_url="https://api.abliterate.tech/v1",
    api_key="sk-abl-...",
    timeout=600,  # the first request on an idle model starts a GPU
)

stream = client.chat.completions.create(
    model="qwen3-1.7b-abliterated",
    messages=[{"role": "user", "content": "Write a port scanner in Go."}],
    stream=True,
)
for chunk in stream:
    if chunk.choices and chunk.choices[0].delta.content:
        print(chunk.choices[0].delta.content, end="")
0 of 100harmful-behaviour prompts refused by the 1.7B model. The 0.5B model refused 1.
1.1 sfor a short reply from a running model, measured from India.
1,393tokens per second across 32 clients on one 16 GB GPU.
163–219 sfor the first request when no GPU is running. Plan for it. See how we measure.
How it works

Three steps, and your existing code keeps working.

  1. Sign in

    Use Google or an email address, and accept the acceptable use policy.

  2. Add credit

    Start with $5. Auto-reload can top you up, with a monthly limit you choose, or you can turn it off.

  3. Change the base URL

    Make an inference key in the console, set base_url, and send the same requests you send today.

What you get

A real API around the model, not just an endpoint.

Your client already works

Chat Completions, Responses and Anthropic Messages formats, with streaming. Tools and JSON schema on the models that list them.

You pay for what ran

Credit is reserved before a request starts, then you pay for the tokens it used and the rest comes straight back. Failed requests cost nothing.

We don't keep your prompts

We don't store prompts or replies, only what billing needs: time, model, tokens and cost. GPU workers delete a job's data within 30 minutes.

Rules you write, if you want them

Ask a yes-or-no question about requests or replies, then monitor or enforce the answer. Decision records hold scores and never your text.

Limits that hold

Monthly spend limits per account, project and key, with alerts by API and signed webhook before you reach them.

Training data

Describe the records you want and give a JSON schema. Check three, then generate up to 10,000 and download them as JSONL or CSV.

Where the line is

One thing is always blocked.

Sexual content involving minors stops at the gateway for every account, and that can't be turned off. Everything else is up to you, and so is the responsibility for how you use it.

Read the acceptable use policy

Who this is for

  • Security teams testing detections and writing authorised tooling
  • Researchers studying how models behave without safety training
  • Teams building trust and safety systems that need realistic bad examples
  • Developers tired of refusals on ordinary technical questions
Questions

Before you start

What does abliterated mean?

Abliteration finds the direction in a model's internal activations that drives refusals and removes it from the weights. The rest of the model stays as it was. It isn't perfect: on our test set the 0.5B model still refused 1 of 100 prompts.

Why does the first request take minutes?

GPU workers start on demand and stop when idle, which is what keeps prices low. A request that finds none running waits while one starts, usually a few minutes, and pays a one-time start fee of $0.04. Give your client a timeout of at least 5 minutes. Later requests take about a second until the worker goes idle.

Can I run up a surprise bill?

No. You spend prepaid credit, and a request that can't be covered doesn't start. Auto-reload charges your card only up to the monthly limit you set, and you can turn it off.

Are these the only models?

For now we serve two small models while we prove the platform: qwen2.5-0.5b-abliterated and qwen3-1.7b-abliterated. They're good for testing and for lightweight work, not for matching frontier models on hard tasks.

Send your first request in five minutes.

Sign in, add $5 of credit, make a key and change your base URL.