INEMA Guide · checked on Nov 9, 2026

Uncensored AI: where to use it, how much it costs, and what to check

Seven options side by side, from a ready-to-use API to a model running on your computer, with prices, stated privacy practices, and what no one has confirmed.

Uncensored AI banner: where to use it, how much it costs, and what to check
In short

This guide shows where to find “uncensored” AI models, meaning versions that do not refuse requests. It is for people testing the security of their own systems, doing research, or simply wanting an assistant that does not freeze up on sensitive topics. The table compares providers offering APIs, chat, rented GPUs, and local use on your own computer, with prices, stated privacy practices, and whether they ask for identity verification. To use this guide, just read it; the examples require an account with your chosen provider or Ollama installed.

Video

Uncensored AI: what it is and how it works

In 3 minutes: what changes in an uncensored model, where to find it and where to use it without a graphics card. The video is in Portuguese.

What it is

Three ways to remove the guardrails, and the cost of each

A standard model learns to refuse certain requests. Publishers of “uncensored” versions remove that refusal in different ways, and each approach changes what you get.

Banner showing provider types: ready-to-use API, router, rented GPU, local with Ollama, Hugging Face, and privacy

Uncensored (fine-tune)

The model is trained again with examples that do not include refusals. The Dolphin family is one example. Training costs money, but the results tend to be more stable. This description of Dolphin is general knowledge in the field; check each version’s model card.

Abliterated

No retraining is involved. The technique finds the “refusal direction” in the weights (a single direction in the model’s activations, according to the Arditi et al. 2024 paper) and removes it through orthogonalization. It is fast and cheap, which is why hundreds of versions exist.

Jailbroken

The model itself remains unchanged. What changes is the request: a prompt crafted to trick its rules. It works until the provider patches it, can break without warning, and often violates the terms of use. This guide does not cover jailbreaking.

What you lose without guardrails. Uncensored models hallucinate more and may lose quality: the paper that popularized abliteration itself shows benchmark scores dropping for Llama 3 8B after the procedure. In safety analysis, it also reports a false positive with high confidence. And there are no guardrails: it will give dangerous or incorrect answers all the same. Check everything it says.

Where to find the models

How to find uncensored models on Hugging Face

Almost every open uncensored model originates on Hugging Face, the largest public model repository. The providers in the table below source many of their models there.

Search by name

At huggingface.co/models, search for abliterated, uncensored, heretic (a recent variant), or dolphin. Sort by downloads or likes.

Same model, multiple versions

The same base model appears in several editions, from different authors (huihui-ai, mlabonne, orcarouter) and in different sizes (quantizations). To run it in Ollama, filter for GGUF.

Read the model card

Before downloading, check the card for the base model, the method used, the quantization, and whether benchmarks are included. Claims like “0% refusal with no loss” come from the author, not an independent test.

Comparison

Provider comparison table

Prices in US$ per 1 million tokens (input / output), unless noted, checked on Nov 9, 2026 on each provider’s public pages. They can change without notice: check the site before paying. “Not confirmed” means we did not find the information, not that it does not exist.

Quick glossary of table terms
Private / Anonymized
Venice privacy modes. Private: the model runs on a Venice or partner GPU with contractually guaranteed zero retention. Anonymized: the request goes to a third-party provider, which can see and may store its contents.
TEE
Trusted Execution Environment: an isolated part of the hardware that even the server owner cannot inspect, with attestation that it is running the correct code.
E2EE
End-to-end encryption: the request leaves your device encrypted and is opened only inside that isolated hardware.
ZDR
Zero data retention: the provider promises not to store requests or responses.
Quantization
Storing model weights at lower precision (Q4 = 4 bits per weight, for example). The file becomes much smaller and fits on a smaller GPU, with some loss of quality.
GGUF
A quantized model file format used by Ollama and llama.cpp.
MLX
Apple’s library for running models on Apple Silicon chips (M1 and later).
vLLM
An open-source server for running models on GPUs at high throughput; it also exposes an OpenAI-compatible API.
Token / “per 1 million tokens”
A token is a piece of text the model reads or writes, usually part of a word. Providers charge per million tokens: one price for what you send (input) and another for what the model replies (output).
Heretic
A label for a recent refusal-removal variant, similar to abliteration. It appears in model names, such as GLM 4.7 Flash Heretic.
DIEM
A Venice token on the Base network. Each staked DIEM is worth US$ 1 in API credit per day.
Pod
The GPU machine you rent on RunPod. You are charged by the second while it is running.
Red team
A team or test that attacks your own system, with authorization, to find weaknesses before someone outside does.

Swipe the table sideways →

ProviderTypeUncensored modelsApprox. priceIdentity required?Stated privacy / retentionOpenAI-compatible API?Notes
Venice
featured
Ready-to-use API + chat
  • GLM 4.7 Flash Heretic olafangensan-glm-4.7-flash-heretic 0.07 / 0.40
  • Gemma 4 Uncensored gemma-4-uncensored 0.1625 / 0.50
  • Venice Uncensored 1.2 venice-uncensored-1-2 0.20 / 0.90
  • DeepSeek V4.1 Flash 1017 Uncensored deepseek-v4-1-flash-1017-uncensored 0.33 / 1.32
  • DeepSeek V4.1 Flash 1017 Abliterated (E2EE) e2ee-deepseek-v4-1-flash-1017-abliterated 0.375 / 1.50
  • Gemma 4 26B A4B Uncensored (E2EE) e2ee-gemma-4-26b-a4b-uncensored-p 0.19 / 0.88
Per token: see each model
Pro plan: US$ 18/month on annual billing only (US$ 216/year); the site indicates savings of US$ 36 per year, which works out to about US$ 21 month to month
Account required (email or wallet). ID document: not confirmed; check the sitePrivate mode: contractually guaranteed zero retention. TEE/E2EE on some models. Anonymized mode: the third-party provider can see the request. Provider-stated; no independent audit foundYesPay by card, crypto, or DIEM. The subscription does not include unlimited API access. The model being retired on Nov 15, 2026 is deepseek-v4-1-flash (without “1017”); deepseek-v4-1-flash-1017-uncensored remains available and is the API’s default model
abliteration.aiReady-to-use APIAbliterated Large v2 (based on GLM-5.3, according to the site) and Large FlashUS$ 20, 50, and 200/month plans (converted to credits). Per token: not confirmed; Venice resells Large v2 at 3.00 / 5.00Sign up with Google, GitHub, Microsoft, or email; terms require users to be 18+. ID document: not confirmed“Zero data retention,” prompts excluded from logs. Stated by the site itself for its API. Note: Venice resells the same Large v2 in Anonymized mode, where the third-party provider can see the requestYes, and also Anthropic’s Messages APIFocused on security and red teaming. Terms prohibit illegal use
orcarouter (Ollama profile)LocalQwen3.8-27B-Uncensored; Qwen3.8-Flash-Next-Uncensored (MLX, Apple Silicon)Free (you provide the hardware)No, download onlyRuns on your machineYes, through Ollama at localhost:11434/v1Do not confuse it with the orcarouter.ai gateway from the same team, which is not uncensored
OpenRouterRouterDolphin Mistral 24B Venice Edition; Hermes 4 405B; Cydonia 24B; Skyfall 36B; Magnum v4 72B; Euryale 70BDolphin Venice: 0.20 / 0.90
Hermes 4 405B: 1.00 / 3.00
Magnum v4 72B: 2.50 / 5.00
Account required. Crypto: not confirmedDepends on the provider behind each model; logging and ZDR controls are available in the accountYesHermes, Magnum, and Euryale are less restrictive, but not necessarily 100% refusal-free
FeatherlessReady-to-use API (subscription)Catalog of 40,000+ Hugging Face models; which ones are uncensored: not confirmedChat: US$ 25/month (unlimited tokens, 32K context)
Developer: US$ 50/month in credits
Account + paymentPolicy says it does not collect prompts or responses (text dated Jun 10, 2024)Yes, base URL https://api.featherless.ai/v1The Chat plan prohibits API or automated use; use Developer for API access
RunPodRented GPUAny model you deploy (vLLM, Ollama)Per hour, Secure Cloud: A100 80GB US$ 1.79; H100 PCIe US$ 2.89; H100 SXM US$ 3.99; RTX Pro 6000 US$ 2.49
Community Cloud, starting at: A100 US$ 1.19–1.39; H100 PCIe US$ 1.99; H100 SXM US$ 2.69; RTX Pro 6000 US$ 1.69
Account + cardYou control the machine and logsYes, if you run vLLM or OllamaCharged by the second. Community Cloud is cheaper and uses third-party machines; Secure Cloud runs in partner data centers. Shut down the pod when you are done
Local with OllamaLocalhuihui-ai, orcarouter, mlabonne, and others in GGUFFree + hardwareNoComplete: nothing leaves your computerYes, at localhost:11434/v1More private and cheaper over the long term; quality depends on your GPU

We also checked Novita, Together, and DeepInfra: we did not find uncensored models on their public pages. Hugging Face Inference Endpoints rents GPUs by the hour so you can deploy any model. Vast.ai was not researched.

Which one to choose

Start with your situation

There is no single best provider. There is the one that fits what you want to do right now.

I want to test quickly

Create a Venice account and use the chat or API with Venice Uncensored 1.2. It takes the fewest steps.

Go to: Venice

I do not want to send anything outside

Run an abliterated model on your computer with Ollama. Nothing leaves the machine. Larger models require a reasonably powerful GPU.

Go to: Local with Ollama

I need a low-cost API

At Venice, the cheapest option today is GLM 4.7 Flash Heretic (0.07 / 0.40), followed by Gemma 4 Uncensored (0.1625 / 0.50). On OpenRouter, Dolphin Venice costs 0.20 / 0.90. They all accept the OpenAI format. Cheaper does not mean better: test the quality on your task.

Go to: Venice or OpenRouter

I want maximum privacy

Local use is the only option that does not depend on anyone’s word. If you need the cloud, choose a rented GPU under your control or Venice’s E2EE modes.

Go to: Local, RunPod, or Venice E2EE
Step by step

Three ways to get started today

The examples use endpoints checked against public documentation on Nov 9, 2026. No API keys are shown here: create your own on the provider’s site and store it in an environment variable.

1

Call Venice through its OpenAI-compatible API

Venice follows the OpenAI specification, so any OpenAI library works if you change the endpoint. Create a key at venice.ai/settings/api and store it in your terminal. The API uses credits: the subscription includes only a small monthly allowance (Pro: US$ 1; free accounts: none), so add funds first. Without a balance, the API returns 402 INSUFFICIENT_BALANCE.

Linux, Mac, or WSL (bash terminal):

export VENICE_API_KEY="paste-your-key-here"   # never put it in code or git

curl https://api.venice.ai/api/v1/chat/completions \
  -H "Authorization: Bearer $VENICE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model":"venice-uncensored-1-2","messages":[{"role":"user","content":"Explain what abliteration is in 3 sentences."}]}'

Windows (PowerShell):

$env:VENICE_API_KEY="paste-your-key-here"   # valid only for this window

$body = @{ model="venice-uncensored-1-2"; messages=@(@{ role="user"; content="Explain what abliteration is in 3 sentences." }) } | ConvertTo-Json -Depth 5
Invoke-RestMethod -Uri https://api.venice.ai/api/v1/chat/completions -Method Post -Headers @{ Authorization="Bearer $env:VENICE_API_KEY" } -ContentType "application/json; charset=utf-8" -Body $body

The same in Python, using the openai library. First create an isolated environment so you do not change the system Python:

# Linux, Mac, or WSL
python3 -m venv .venv && source .venv/bin/activate
pip install openai

# Windows (PowerShell)
py -m venv .venv; .venv\Scripts\Activate.ps1
pip install openai
import os
from openai import OpenAI

client = OpenAI(
    base_url="https://api.venice.ai/api/v1",
    api_key=os.environ["VENICE_API_KEY"],
)
r = client.chat.completions.create(
    model="deepseek-v4-1-flash-1017-uncensored",  # or venice-uncensored-1-2, gemma-4-uncensored
    messages=[{"role": "user", "content": "List 3 risks of an uncensored model."}],
)
print(r.choices[0].message.content)

Some models are available only on paid plans and return a 401 PRO_ONLY_MODEL error. IDs change: check the current list at docs.venice.ai. abliteration.ai works the same way, using base_url="https://api.abliteration.ai/v1" and its own key.

2

Run a model on your computer with Ollama

First install Ollama. On Windows and Mac, download it from ollama.com/download. On Linux:

curl -fsSL https://ollama.com/install.sh | sh

Memory rule: the model must fit in your graphics card’s memory (VRAM), with 1 to 2 GB to spare for the conversation. The Ollama file listing shows its size: orcarouter/Qwen3.8-27B-Uncensored (the default quantized version) is 18 GB, so it needs a 24 GB GPU. Without a GPU it runs in your computer’s memory, but much more slowly.

Choose based on your machine (sizes checked in the Ollama registry on Nov 9, 2026):

# GPU with 24 GB or more (18 GB file)
ollama run orcarouter/Qwen3.8-27B-Uncensored

# 8 GB GPU (5 GB file)
ollama run huihui_ai/qwen3-abliterated:8b

# CPU only or basic laptop (2.5 GB file)
ollama run huihui_ai/qwen3-abliterated:4b

The first time, the command downloads the model; after that, it opens the chat directly. To exit, type /bye.


# the same model through Ollama’s local API (Ollama must be running;
# if you get a connection error, run "ollama serve" in another terminal)
curl http://localhost:11434/api/chat -d '{"model":"orcarouter/Qwen3.8-27B-Uncensored","messages":[{"role":"user","content":"hi"}],"stream":false}'

Want to set this up for access from your phone without exposing anything to the internet, and compare a standard model with an uncensored one? The related guide walks you through the whole process: Private AI at 3 levels.

3

Connect the model to an agent tool

Agent tools and editors that accept an “OpenAI-compatible endpoint” can use any of these models. The idea is always the same: three fields:

  • Base URL: https://api.venice.ai/api/v1, https://api.abliteration.ai/v1, or locally, http://localhost:11434/v1.
  • Key: your own, stored in an environment variable (with local Ollama, the field is required but ignored; its documentation uses ollama).
  • Model name: the exact ID from the table, such as venice-uncensored-1-2.

Concrete example: opencode accepts a custom provider in the opencode.jsonc file, using the format in its documentation. For Venice:

{
  "$schema": "https://opencode.ai/config.json",
  "providers": {
    "venice": {
      "name": "Venice",
      "env": ["VENICE_API_KEY"],
      "package": "@opencode/ai/providers/openai-compatible",
      "settings": { "baseURL": "https://api.venice.ai/api/v1" },
      "models": { "venice-uncensored-1-2": {} }
    }
  }
}

The model appears as venice/venice-uncensored-1-2. With local Ollama, opencode finds models automatically at http://127.0.0.1:11434. Other agent tools, such as Claude Code and Codex, are designed for their companies’ own models and may limit or reject outside providers; check each tool’s documentation before trying. abliteration.ai also supports Anthropic’s format, which helps with tools that accept only that format. Remember: a smaller model without guardrails makes more mistakes on long agent tasks, so review every step it takes.

Check before using

Where your data goes

“Uncensored” does not mean “unlogged.” Read this before pasting anything into a provider.

  • Stated retention is not audited retention. Venice, abliteration.ai, Featherless, and orcarouter.ai say they do not store your requests. We found no independent audit of any of them.
  • Do not send customer data, passwords, or documents. If the data is not yours or is sensitive, use a local model.
  • Check the model’s privacy mode. At Venice, “Anonymized” models send the request to a third-party provider, which may store it.
  • Read the terms. Several providers prohibit illegal and high-risk use, even when they sell unfiltered models.

Responsible use

Good uses include testing the security of your own app, organizing your photos and files without a filter getting in the way, analyzing your own equipment and network, and researching how models work.

Removing a model’s guardrails does not remove the law. You decide what to ask and what to do with the answer, and you are responsible for it.

Related guides from INEMA

Keep exploring

Two guides that complete this one.

Private AI at 3 levels

Set up local, standard, and uncensored AI, and securely access it from anywhere.

Defensive uncensored AI

A toolkit for connecting an abliterated model and using it to secure your own systems, always within an authorized scope.

Technical references