{"slug": "grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch", "title": "Grok 4.5 Isn't Open Source. The Apache 2.0 Release Has a Privacy Catch.", "summary": "SpaceXAI open-sourced Grok Build, its coding agent and terminal UI, under Apache 2.0, but the release does not include Grok 4.5 model weights, and users must pay API inference costs. A developer who cloned the repository found that the privacy controls are fragmented, with the `/privacy` command not affecting telemetry or trace upload, requiring separate configuration to disable them.", "body_md": "SpaceXAI open-sourced Grok Build, and three versions of the story immediately started circulating:\n\nThe first two are wrong. The third is directionally useful, but nowhere near proven.\n\nI cloned the July 21 public repository, checked 2,847 tracked files, traced the current telemetry and session-upload controls, and compared that source with the wire-level report from Grok Build 0.2.93.\n\nHere's what I found.\n\n`base_url`\n\n, including a local inference endpoint.SpaceXAI's [official announcement](https://x.ai/news/grok-build-open-source) is precise: it open-sourced the coding agent and TUI.\n\nThe public repository includes:\n\nThe distinction looks like this:\n\n| Layer | Open now? | Can I self-host it? |\n|---|---|---|\n| Grok Build agent loop | Yes | Yes |\n| Terminal UI | Yes | Yes |\n| File and shell tools | Yes | Yes |\n| Skills, plugins, MCP, hooks | Yes | Yes |\n| Grok 4.5 weights | No | No |\n| A different local model | Bring your own | Yes, if compatible |\n\nThe repository says its first-party code is Apache 2.0. Third-party and vendored components keep their original licenses. It also says external contributions aren't currently accepted.\n\nThat last point surprised me. I can fork it, but I shouldn't assume SpaceXAI will merge my pull request. This is open source as inspectable and reusable code, not yet a normal community-maintained upstream.\n\nThe open-source license removes the harness license fee. It doesn't remove model inference cost.\n\nGrok 4.5 is still an API model. SpaceXAI currently lists:\n\n| Token type | Short context | At or above 200K prompt |\n|---|---|---|\n| Input / 1M | $2.00 | $4.00 |\n| Cached input / 1M | $0.30 | $0.60 |\n| Output / 1M | $6.00 | $12.00 |\n\nHere is the first pain translation.\n\n```\n10M input x $2/M = $20\n2M output x $6/M = $12\nMonthly model bill = $32\n```\n\nScale that to 100M input and 20M output:\n\n```\n100M input x $2/M = $200\n20M output x $6/M = $120\nMonthly model bill = $320\n```\n\nAnd a long-context agent request can double the simple estimate:\n\n```\n300K input x $4/M = $1.20\n50K output x $12/M = $0.60\nOne request = $1.80\n```\n\nAt 50 such runs per workday, that theoretical maximum becomes:\n\n```\n$1.80 x 50 x 22 workdays = $1,980/month on one developer\n```\n\nThat isn't a measured average Grok Build bill. It's what the published long-context rates imply for that workload. My point is simpler: open-source software and free inference are different claims.\n\nThe official docs expose a custom model configuration:\n\n```\n[models]\ndefault = \"local-coder\"\n\n[model.local-coder]\nmodel = \"your-local-model-id\"\nbase_url = \"http://127.0.0.1:8000/v1\"\nname = \"Local Coder\"\nenv_key = \"LOCAL_MODEL_KEY\"\n```\n\nAfter changing the config, I can inspect what Grok Build discovered:\n\n```\ngrok inspect\ngrok -p \"Explain this repository\" -m local-coder\n```\n\nThis is the part of the release I find genuinely exciting. Grok Build can become an open agent shell around a local model, a company gateway, or another compatible API.\n\nBut I would test tool calling before celebrating. A local model that can answer coding questions may still fail the agent loop: malformed tool arguments, weak recovery after shell errors, context loss, or excessive retries can make the setup unusable.\n\nI expected `/privacy opt-out`\n\nto be the master switch.\n\nIt isn't.\n\nThe current source documentation treats these as separate:\n\n| Control | What it controls |\n|---|---|\n`/privacy` |\nCoding-data sharing preference |\n`[features] telemetry` |\nProduct analytics |\n`[telemetry] trace_upload` |\nSession trace upload |\n| External OpenTelemetry | A separate stream to my collector |\n\nThe user guide explicitly says `/privacy`\n\ndoes not change telemetry or trace upload.\n\nSo my conservative config starts like this:\n\n```\n[features]\ntelemetry = false\n\n[telemetry]\ntrace_upload = false\nmixpanel_enabled = false\n```\n\nI also checked how the current source resolves those values. With no requirement, environment variable, local config, or remote setting, telemetry falls back to disabled. But remote settings can affect the resolved value, and trace upload follows telemetry when it isn't set explicitly.\n\nThat is why I would set both values myself instead of relying on a fallback.\n\nThe original [wire-level analysis](https://gist.github.com/cereblab/dc9a40bc26120f4540e4e09b75ffb547) tested Grok Build 0.2.93 with controlled repositories and captured the tool's traffic.\n\nThe strongest result wasn't \"a cloud model saw a file.\" Every cloud coding agent needs the relevant context.\n\nThe stronger result was a separate storage path:\n\nThe researcher did **not** prove that SpaceXAI trained on that data. Transmission and storage were demonstrated; training was not.\n\nSpaceXAI reportedly disabled the whole-codebase upload server-side and said previously uploaded data would be deleted. The current source I audited contains no `codebase_upload`\n\nor `git bundle`\n\nstring.\n\nBut here's the part I won't hand-wave: the current tree still contains session-trace upload, GCS storage, upload-queue, telemetry, and remote-settings code.\n\nThat doesn't prove the old behavior survives. It proves a static source search is not a substitute for a packet capture.\n\n``` python\ndef should_you_run_grok_build(repo):\n    if repo == \"public or disposable\":\n        return \"Try the official build, but inspect config and logs.\"\n\n    if repo == \"private but replaceable\":\n        return (\n            \"Disable telemetry and trace uploads, use canary secrets, \"\n            \"and capture network traffic before real work.\"\n        )\n\n    if repo == \"regulated or crown-jewel\":\n        return (\n            \"Pin an audited source commit, use a private/local model endpoint, \"\n            \"block optional domains, and require a repeatable wire test.\"\n        )\n\n    return \"Do not assume open source equals offline. Map every data path first.\"\n```\n\n**For a personal public repo:** I'd install the binary, turn off telemetry and trace upload explicitly, and use `grok inspect`\n\nbefore the first task.\n\n**For a private startup repo:** I'd create a canary clone with fake secrets, run it behind a logging proxy, and verify the exact client version. I would rotate any real credential that an older affected build could have accessed.\n\n**For an enterprise:** I'd fork and pin the source, define requirements in managed configuration, route inference through a controlled endpoint, and block remote session sharing unless the team needs it.\n\n**For a local-LLM setup:** I'd test 50 real tasks, not five demos. I care about task completion, retry count, tool-call validity, latency, and total compute time.\n\n**For Grok 4.5 users:** I'd keep model-cost monitoring. The Apache license doesn't change the $2/$6 token rates or the 2x long-context price.\n\nThis release says something important about AI coding tools.\n\nThe model is only one layer. The agent harness decides which files are read, what context is assembled, which commands run, what gets persisted, and where the results go. That layer can create as much security and cost risk as the model.\n\nOpen-sourcing the harness moves the industry in the right direction because it makes those decisions inspectable. It also raises the standard: now that I can read the code, I expect vendors and teams to explain the effective runtime configuration too.\n\nIf you need one route across Grok, OpenAI, Anthropic, and local-compatible endpoints, that's roughly what [TokenMix](https://tokenmix.ai) helps with. Disclosure: I work on the research side. The full source-audited breakdown is in the [original Grok Build article](https://tokenmix.ai/blog/grok-build-open-source-2026-local-models-privacy).\n\nGrok Build is a meaningful Apache 2.0 release. Grok 4.5 is still closed, local-first still needs configuration, and privacy still has to be verified at runtime.\n\nI'd use the source. I wouldn't outsource my trust to the word \"open.\"\n\nWould you trust an open-source agent with a private repository if the model endpoint and runtime policy were still controlled remotely?", "url": "https://wpnews.pro/news/grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch", "canonical_source": "https://dev.to/tokenmixai/grok-45-isnt-open-source-the-apache-20-release-has-a-privacy-catch-1mkj", "published_at": "2026-07-22 02:48:44+00:00", "updated_at": "2026-07-22 03:33:11.053378+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-products", "developer-tools", "ai-infrastructure"], "entities": ["SpaceXAI", "Grok Build", "Grok 4.5", "Apache 2.0"], "alternates": {"html": "https://wpnews.pro/news/grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch", "markdown": "https://wpnews.pro/news/grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch.md", "text": "https://wpnews.pro/news/grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch.txt", "jsonld": "https://wpnews.pro/news/grok-4-5-isn-t-open-source-the-apache-2-0-release-has-a-privacy-catch.jsonld"}}