China's AI Export Draft Spares API Calls and Public Weights. Overseas Deploys Aren't

China's Ministry of Commerce and Ministry of Science and Technology published Announcement No. 48 of 2026 on October 16, proposing to add 40 technologies — 23 of them AI-related, covering large models, agents and computing clusters — to the Catalogue of Technologies Prohibited and Restricted from Export, with public comment running through November 15. The draft treats API, app and web-UI access to Chinese models and already-public open-source weights as outside export management, while a vendor installing a restricted model on overseas servers counts as an in-scope local deployment; an interim pre-export registration for listed technologies took effect immediately. A ministry spokesperson said the rules aim to "prevent misuse and abuse" and "ensure that AI remains under human control.

If your app calls a Chinese model through an API, China's newest export-control draft says that call is not an export. If a Chinese vendor installs a restricted model on servers in your country, the same ministry says https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html that one is. On October 16, China's Ministry of Commerce MOFCOM and Ministry of Science and Technology published Announcement No. 48 of 2026 https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . It proposes adding 40 technologies to the Catalogue of Technologies Prohibited and Restricted from Export , and 23 of them are AI https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html : large models, agents, computing clusters and information processing. Public comment runs from October 16 to November 15 https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . It's a draft. But one piece already applies: an interim pre-export registration https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html for the listed technologies, in force from the day of the announcement until the revised catalogue takes effect. Across all three fields AI, biomedicine and solar , the draft proposes 14 technologies for prohibition and 26 for restriction https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html . The ministry's own AI examples are concrete. "AI-driven malicious code generation and mutation technology" would be prohibited https://www.news.cn/fortune/20261017/1f4b116e36124e2bb9c3c15e26bc86cb/c.html . "AI-assisted vulnerability discovery technology" would be restricted https://www.news.cn/fortune/20261017/1f4b116e36124e2bb9c3c15e26bc86cb/c.html . The interim registration names four triggers: transferring ownership of a listed technology abroad, licensing it for overseas use, a domestic owner coming under foreign control, and any other case MOFCOM specifies by notice notice https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . Exports that started before October 16 but haven't finished are covered too https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . A ministry spokesperson said the rules aim to "prevent misuse and abuse" and "ensure that AI remains under human control," per The Next Web https://thenextweb.com/news/china-ai-export-controls-draft . MOFCOM also says the revision is not aimed at any specific country, region or entity https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html , and that most AI technologies can still be exported freely https://finance.sina.com.cn/tech/digi/2026-10-16/doc-inivmiic6932807.shtml . Calls through the gate, crates at the desk: the draft treats serving a model and shipping it differently. The spokesperson's Q&A says the test is whether a restricted technology moves from mainland China to another country https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html . | What you do | What the draft says | |---|---| | Call a Chinese model over an API, app or web UI | Outside large-model export management Q&A https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html | | Run weights that are already public as open source | Not in scope: already in the public domain notice https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html | | Wait for a lab's next open release | Open-sourcing AI technology can get automatic licensing Q&A https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html | | Have a vendor install a restricted model on your servers | In scope as overseas local deployment Q&A https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html | | Use a vendor's model on that vendor's own cloud abroad | Automatic licensing may apply Q&A https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html | The API row is spelled out. The Q&A says offering a restricted large model through "API 调用、APP / 网页交互、SaaS 应用、本地端侧轻量化部署" API calls, app or web interaction, SaaS and lightweight on-device deployment is not large-model technology export https://finance.sina.com.cn/tech/digi/2026-10-16/doc-inivmiic6932807.shtml . The open-source rows are the ones to read twice. Technology that has "进入公共领域" entered the public domain through open source or academic papers is not covered https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . For releases still to come, the ministry proposes automatic licensing and says it should basically achieve "即报即出", export as soon as it is filed https://finance.sina.com.cn/tech/digi/2026-10-16/doc-inivmiic6932807.shtml . So the draft adds a filing step in front of a restricted model's open release, and says the step should not hold it up. How fast that works in practice is unknown until the rule is final. The 23 AI items and their technical parameters sit in Attachment 1 https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html , a .wps file the notice page doesn't render, so the figures below come from news reports, not from the attachment itself. The Next Web, citing Bloomberg https://thenextweb.com/news/china-ai-export-controls-draft , reports that the large-model curbs cover weights, source code and other core components of models with at least 2 trillion parameters, or models in the world's top 10 on tests such as performance and safety. AP, via Fortune https://fortune.com/2026/10/16/china-restrictions-ai-chips-solar-power-exports-security/ , reports the same 2-trillion figure, plus prohibitions on core technology of large models trained on sensitive national data and on AI agents designed for highly sensitive environments such as national defence and critical information infrastructure. Both outlets report that Moonshot AI's Kimi K3 and Alibaba's Qwen3.8-Max exceed that size TNW https://thenextweb.com/news/china-ai-export-controls-draft , Fortune https://fortune.com/2026/10/16/china-restrictions-ai-chips-solar-power-exports-security/ . The draft itself names no models https://thenextweb.com/news/china-ai-export-controls-draft . In July, the Financial Times reported that MOFCOM was consulting Alibaba, ByteDance, Zhipu and other companies on possible controls, including tighter limits on foreign downloads of model weights, while overseas customers could keep using hosted Chinese models Implicator, citing the FT https://www.implicator.ai/china-considers-adding-ai-model-weights-and-chip-designs-to-export-list/ . The October draft keeps that split between serving a model and handing it over, and offers open source a faster path. Installing a restricted model on servers abroad is the case the draft pulls into export control. Nothing in your stack breaks today. A draft can change before it becomes final, and the details that matter most to you sit in Attachment 1, not on the notice page. This isn't legal advice. If your company depends on a Chinese model in production, talk to counsel and read Attachment 1 yourself. Pin the exact weights you run. Weights that are already public sit outside the draft, but a restricted model's next release may have to go through a filing step first. If you self-host an open model, record the commit you tested and keep a local copy where the model's license allows it. With huggingface hub https://huggingface.co/docs/huggingface hub/guides/download , a revision can be a commit SHA: python from huggingface hub import snapshot download Pin a commit SHA, not a branch like "main" path = snapshot download repo id="deepseek-ai/DeepSeek-V3", revision="<commit-sha-you-tested ", local dir="./models/deepseek-v3", print path Keep a second provider wired in. Many hosted models, DeepSeek's included https://api-docs.deepseek.com/ , expose an OpenAI-compatible API, so a fallback can be two clients from the openai https://github.com/openai/openai-node package and a loop. Models and keys come from the environment: python import OpenAI from "openai"; const providers = { client: new OpenAI { baseURL: process.env.PRIMARY BASE URL, apiKey: process.env.PRIMARY API KEY, } , model: process.env.PRIMARY MODEL , }, { client: new OpenAI { baseURL: process.env.FALLBACK BASE URL, apiKey: process.env.FALLBACK API KEY, } , model: process.env.FALLBACK MODEL , }, ; Then try each provider in order and keep the last error: js export async function complete prompt: string { let lastError: unknown; for const { client, model } of providers { try { const res = await client.chat.completions.create { model, messages: { role: "user", content: prompt } , } ; return res.choices 0 .message.content; } catch err { lastError = err; } } throw lastError; } Run your evals against the fallback too, or you're guessing. Ask about on-prem deals in flight. If a Chinese vendor is installing a model in your datacenter and that model falls under the listed technologies, the Q&A treats it as overseas local deployment https://www.mofcom.gov.cn/syxwfb/art/2026/art a4acff07e134447fbe7bbeb486df3ea6.html , and the interim registration covers listed-technology exports already under way on October 16 https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html . Ask the vendor whether it applies and whether they have registered. Comment if it affects you. The notice accepts comments by email, fax or post until November 15 https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art 0a31a3c9ac404f7a9b0e917ce3412997.html , with the contact details on the notice page. The part you can't check yet is the thresholds. Which models count as restricted is decided in Attachment 1, and the final rule can still move those lines. Do you run a Chinese open-weight model in production, or only call one over an API? Would a filing step in front of the next open release change which models you build on? Tell me in the comments. If you're building agents on top of models you don't control, the hard part is the layer around the model: tool calls, fallbacks, and guardrails that still hold when a provider changes under you. The AI Agents Pocket Guide https://www.amazon.com/dp/B0GYJZ2XJD covers those patterns in a short read. I also build Hermes IDE https://hermes-ide.com/download , so weigh this with that in mind: it runs Claude Code, Codex, OpenCode and other agents side by side, each in its own terminal and worktree, and lets you pick the agent and model per task. It's free, source-available, and on macOS, Windows and Linux GitHub https://github.com/hermes-hq/hermes-ide .