Seven options side by side, from a ready-to-use API to a model running on your computer, with prices, stated privacy practices, and what no one has confirmed.

This guide shows where to find “uncensored” AI models, meaning versions that do not refuse requests. It is for people testing the security of their own systems, doing research, or simply wanting an assistant that does not freeze up on sensitive topics. The table compares providers offering APIs, chat, rented GPUs, and local use on your own computer, with prices, stated privacy practices, and whether they ask for identity verification. To use this guide, just read it; the examples require an account with your chosen provider or Ollama installed.
In 3 minutes: what changes in an uncensored model, where to find it and where to use it without a graphics card. The video is in Portuguese.
A standard model learns to refuse certain requests. Publishers of “uncensored” versions remove that refusal in different ways, and each approach changes what you get.
The model is trained again with examples that do not include refusals. The Dolphin family is one example. Training costs money, but the results tend to be more stable. This description of Dolphin is general knowledge in the field; check each version’s model card.
No retraining is involved. The technique finds the “refusal direction” in the weights (a single direction in the model’s activations, according to the Arditi et al. 2024 paper) and removes it through orthogonalization. It is fast and cheap, which is why hundreds of versions exist.
The model itself remains unchanged. What changes is the request: a prompt crafted to trick its rules. It works until the provider patches it, can break without warning, and often violates the terms of use. This guide does not cover jailbreaking.
What you lose without guardrails. Uncensored models hallucinate more and may lose quality: the paper that popularized abliteration itself shows benchmark scores dropping for Llama 3 8B after the procedure. In safety analysis, it also reports a false positive with high confidence. And there are no guardrails: it will give dangerous or incorrect answers all the same. Check everything it says.
Almost every open uncensored model originates on Hugging Face, the largest public model repository. The providers in the table below source many of their models there.
At huggingface.co/models, search for abliterated, uncensored, heretic (a recent variant), or dolphin. Sort by downloads or likes.
The same base model appears in several editions, from different authors (huihui-ai, mlabonne, orcarouter) and in different sizes (quantizations). To run it in Ollama, filter for GGUF.
Before downloading, check the card for the base model, the method used, the quantization, and whether benchmarks are included. Claims like “0% refusal with no loss” come from the author, not an independent test.
Prices in US$ per 1 million tokens (input / output), unless noted, checked on Nov 9, 2026 on each provider’s public pages. They can change without notice: check the site before paying. “Not confirmed” means we did not find the information, not that it does not exist.
Swipe the table sideways →
| Provider | Type | Uncensored models | Approx. price | Identity required? | Stated privacy / retention | OpenAI-compatible API? | Notes |
|---|---|---|---|---|---|---|---|
| Venice featured | Ready-to-use API + chat |
| Per token: see each model Pro plan: US$ 18/month on annual billing only (US$ 216/year); the site indicates savings of US$ 36 per year, which works out to about US$ 21 month to month | Account required (email or wallet). ID document: not confirmed; check the site | Private mode: contractually guaranteed zero retention. TEE/E2EE on some models. Anonymized mode: the third-party provider can see the request. Provider-stated; no independent audit found | Yes | Pay by card, crypto, or DIEM. The subscription does not include unlimited API access. The model being retired on Nov 15, 2026 is deepseek-v4-1-flash (without “1017”); deepseek-v4-1-flash-1017-uncensored remains available and is the API’s default model |
| abliteration.ai | Ready-to-use API | Abliterated Large v2 (based on GLM-5.3, according to the site) and Large Flash | US$ 20, 50, and 200/month plans (converted to credits). Per token: not confirmed; Venice resells Large v2 at 3.00 / 5.00 | Sign up with Google, GitHub, Microsoft, or email; terms require users to be 18+. ID document: not confirmed | “Zero data retention,” prompts excluded from logs. Stated by the site itself for its API. Note: Venice resells the same Large v2 in Anonymized mode, where the third-party provider can see the request | Yes, and also Anthropic’s Messages API | Focused on security and red teaming. Terms prohibit illegal use |
| orcarouter (Ollama profile) | Local | Qwen3.8-27B-Uncensored; Qwen3.8-Flash-Next-Uncensored (MLX, Apple Silicon) | Free (you provide the hardware) | No, download only | Runs on your machine | Yes, through Ollama at localhost:11434/v1 | Do not confuse it with the orcarouter.ai gateway from the same team, which is not uncensored |
| OpenRouter | Router | Dolphin Mistral 24B Venice Edition; Hermes 4 405B; Cydonia 24B; Skyfall 36B; Magnum v4 72B; Euryale 70B | Dolphin Venice: 0.20 / 0.90 Hermes 4 405B: 1.00 / 3.00 Magnum v4 72B: 2.50 / 5.00 | Account required. Crypto: not confirmed | Depends on the provider behind each model; logging and ZDR controls are available in the account | Yes | Hermes, Magnum, and Euryale are less restrictive, but not necessarily 100% refusal-free |
| Featherless | Ready-to-use API (subscription) | Catalog of 40,000+ Hugging Face models; which ones are uncensored: not confirmed | Chat: US$ 25/month (unlimited tokens, 32K context) Developer: US$ 50/month in credits | Account + payment | Policy says it does not collect prompts or responses (text dated Jun 10, 2024) | Yes, base URL https://api.featherless.ai/v1 | The Chat plan prohibits API or automated use; use Developer for API access |
| RunPod | Rented GPU | Any model you deploy (vLLM, Ollama) | Per hour, Secure Cloud: A100 80GB US$ 1.79; H100 PCIe US$ 2.89; H100 SXM US$ 3.99; RTX Pro 6000 US$ 2.49 Community Cloud, starting at: A100 US$ 1.19–1.39; H100 PCIe US$ 1.99; H100 SXM US$ 2.69; RTX Pro 6000 US$ 1.69 | Account + card | You control the machine and logs | Yes, if you run vLLM or Ollama | Charged by the second. Community Cloud is cheaper and uses third-party machines; Secure Cloud runs in partner data centers. Shut down the pod when you are done |
| Local with Ollama | Local | huihui-ai, orcarouter, mlabonne, and others in GGUF | Free + hardware | No | Complete: nothing leaves your computer | Yes, at localhost:11434/v1 | More private and cheaper over the long term; quality depends on your GPU |
We also checked Novita, Together, and DeepInfra: we did not find uncensored models on their public pages. Hugging Face Inference Endpoints rents GPUs by the hour so you can deploy any model. Vast.ai was not researched.
There is no single best provider. There is the one that fits what you want to do right now.
Create a Venice account and use the chat or API with Venice Uncensored 1.2. It takes the fewest steps.
Go to: VeniceRun an abliterated model on your computer with Ollama. Nothing leaves the machine. Larger models require a reasonably powerful GPU.
Go to: Local with OllamaAt Venice, the cheapest option today is GLM 4.7 Flash Heretic (0.07 / 0.40), followed by Gemma 4 Uncensored (0.1625 / 0.50). On OpenRouter, Dolphin Venice costs 0.20 / 0.90. They all accept the OpenAI format. Cheaper does not mean better: test the quality on your task.
Go to: Venice or OpenRouterLocal use is the only option that does not depend on anyone’s word. If you need the cloud, choose a rented GPU under your control or Venice’s E2EE modes.
Go to: Local, RunPod, or Venice E2EEThe examples use endpoints checked against public documentation on Nov 9, 2026. No API keys are shown here: create your own on the provider’s site and store it in an environment variable.
Venice follows the OpenAI specification, so any OpenAI library works if you change the endpoint. Create a key at venice.ai/settings/api and store it in your terminal. The API uses credits: the subscription includes only a small monthly allowance (Pro: US$ 1; free accounts: none), so add funds first. Without a balance, the API returns 402 INSUFFICIENT_BALANCE.
Linux, Mac, or WSL (bash terminal):
export VENICE_API_KEY="paste-your-key-here" # never put it in code or git curl https://api.venice.ai/api/v1/chat/completions \ -H "Authorization: Bearer $VENICE_API_KEY" \ -H "Content-Type: application/json" \ -d '{"model":"venice-uncensored-1-2","messages":[{"role":"user","content":"Explain what abliteration is in 3 sentences."}]}'
Windows (PowerShell):
$env:VENICE_API_KEY="paste-your-key-here" # valid only for this window $body = @{ model="venice-uncensored-1-2"; messages=@(@{ role="user"; content="Explain what abliteration is in 3 sentences." }) } | ConvertTo-Json -Depth 5 Invoke-RestMethod -Uri https://api.venice.ai/api/v1/chat/completions -Method Post -Headers @{ Authorization="Bearer $env:VENICE_API_KEY" } -ContentType "application/json; charset=utf-8" -Body $body
The same in Python, using the openai library. First create an isolated environment so you do not change the system Python:
# Linux, Mac, or WSL python3 -m venv .venv && source .venv/bin/activate pip install openai # Windows (PowerShell) py -m venv .venv; .venv\Scripts\Activate.ps1 pip install openai
import os from openai import OpenAI client = OpenAI( base_url="https://api.venice.ai/api/v1", api_key=os.environ["VENICE_API_KEY"], ) r = client.chat.completions.create( model="deepseek-v4-1-flash-1017-uncensored", # or venice-uncensored-1-2, gemma-4-uncensored messages=[{"role": "user", "content": "List 3 risks of an uncensored model."}], ) print(r.choices[0].message.content)
Some models are available only on paid plans and return a 401 PRO_ONLY_MODEL error. IDs change: check the current list at docs.venice.ai. abliteration.ai works the same way, using base_url="https://api.abliteration.ai/v1" and its own key.
First install Ollama. On Windows and Mac, download it from ollama.com/download. On Linux:
curl -fsSL https://ollama.com/install.sh | sh
Memory rule: the model must fit in your graphics card’s memory (VRAM), with 1 to 2 GB to spare for the conversation. The Ollama file listing shows its size: orcarouter/Qwen3.8-27B-Uncensored (the default quantized version) is 18 GB, so it needs a 24 GB GPU. Without a GPU it runs in your computer’s memory, but much more slowly.
Choose based on your machine (sizes checked in the Ollama registry on Nov 9, 2026):
# GPU with 24 GB or more (18 GB file) ollama run orcarouter/Qwen3.8-27B-Uncensored # 8 GB GPU (5 GB file) ollama run huihui_ai/qwen3-abliterated:8b # CPU only or basic laptop (2.5 GB file) ollama run huihui_ai/qwen3-abliterated:4b
The first time, the command downloads the model; after that, it opens the chat directly. To exit, type /bye.
# the same model through Ollama’s local API (Ollama must be running; # if you get a connection error, run "ollama serve" in another terminal) curl http://localhost:11434/api/chat -d '{"model":"orcarouter/Qwen3.8-27B-Uncensored","messages":[{"role":"user","content":"hi"}],"stream":false}'
Want to set this up for access from your phone without exposing anything to the internet, and compare a standard model with an uncensored one? The related guide walks you through the whole process: Private AI at 3 levels.
Agent tools and editors that accept an “OpenAI-compatible endpoint” can use any of these models. The idea is always the same: three fields:
https://api.venice.ai/api/v1, https://api.abliteration.ai/v1, or locally, http://localhost:11434/v1.ollama).venice-uncensored-1-2.Concrete example: opencode accepts a custom provider in the opencode.jsonc file, using the format in its documentation. For Venice:
{
"$schema": "https://opencode.ai/config.json",
"providers": {
"venice": {
"name": "Venice",
"env": ["VENICE_API_KEY"],
"package": "@opencode/ai/providers/openai-compatible",
"settings": { "baseURL": "https://api.venice.ai/api/v1" },
"models": { "venice-uncensored-1-2": {} }
}
}
}
The model appears as venice/venice-uncensored-1-2. With local Ollama, opencode finds models automatically at http://127.0.0.1:11434. Other agent tools, such as Claude Code and Codex, are designed for their companies’ own models and may limit or reject outside providers; check each tool’s documentation before trying. abliteration.ai also supports Anthropic’s format, which helps with tools that accept only that format. Remember: a smaller model without guardrails makes more mistakes on long agent tasks, so review every step it takes.
“Uncensored” does not mean “unlogged.” Read this before pasting anything into a provider.
Good uses include testing the security of your own app, organizing your photos and files without a filter getting in the way, analyzing your own equipment and network, and researching how models work.
Removing a model’s guardrails does not remove the law. You decide what to ask and what to do with the answer, and you are responsible for it.
Two guides that complete this one.
Set up local, standard, and uncensored AI, and securely access it from anywhere.
A toolkit for connecting an abliterated model and using it to secure your own systems, always within an authorized scope.