Uncensored DeepSeek and GLM APIs with 1M context and no prompt logging

Bf16.ai launched hosted API access to uncensored versions of DeepSeek's deepseek-v4.1-flash and Z.ai's GLM-5.3, offering a 1,048,576-token (1M) context window, native OpenAI and Anthropic endpoints, pay-per-token pricing with no subscription or card required, and no prompt logging. The company said it removes refusals by projecting the refusal direction out of the open-weight checkpoints rather than retraining or using prompt tricks, and positions the service for coding agents such as Claude Code, Codex, OpenClaw and Hermes Agent, which can be pointed at the API via the ANTHROPIC_BASE_URL environment variable for a single terminal session. bf16.ai said the models are intended for legitimate engineering, research and creative work and that unlawful use is prohibited under its acceptable use policy.

Uncensored LLMs for agents that finish. Run Claude Code, Codex, OpenClaw or Hermes Agent on uncensored DeepSeek and GLM. 1M context. Native OpenAI & Anthropic endpoints. No card required · Pay per token · No subscription ANTHROPIC BASE URL=https://api.bf16.ai \ ANTHROPIC AUTH TOKEN="$BF16 API KEY" \ ANTHROPIC DEFAULT HAIKU MODEL='deepseek/deepseek-v4.1-flash-uncensored 1m ' \ CLAUDE CODE SUBAGENT MODEL='deepseek/deepseek-v4.1-flash-uncensored 1m ' \ ENABLE TOOL SEARCH=false \ claude --model 'zai-org/glm-5.3-uncensored 1m ' Runs only this terminal session on bf16.ai — plain claude stays on your subscription. Example session Sound familiar? · Why agent runs break One false flag poisons the whole session. Auditing your own SaaS? Locking down your own VPS? Once a safety classifier trips mid-run, the whole agent thread locks up — throwing away hours of context. Read repo Spot RBAC flaw Write patch Run test suite Ship clean PR Read repo Spot RBAC flaw Write patch Run test suite Ship clean PR Hardening your VPS, auditing your own SaaS, or flashing your own router shouldn’t require begging a vendor waitlist for permission. One tripped keyword on a gated API taints the entire conversation history — forcing you to scrap hours of agent context and start over. Clinical notes, oncology literature, and grimdark game dialogue come back straight — never softened, rewritten, or scolded. When filters get in the way, engineers reach for uncensored open-weight models. We host them at official API rates — so you don’t need the GPUs. Edited in the weights. Not in the prompt. Direct answers on the first turn. No preachy preambles, no mid-stream classifier cutoffs, and no quietly watered-down code. Orthogonal weight edit — not a jailbreak. We project the refusal direction out of the open-weight checkpoint. No retraining and no prompt tricks — the edit targets that single direction. One hard line: illegal use is off-limits. We serve uncensored models for legitimate engineering, research, and creative work. Unlawful abuse is strictly prohibited. Acceptable Use Policy → https://bf16.ai/legal/aup Toggle above to inspect: projecting out r̂ zeroes refusal triggers without rescaling orthogonal coding and reasoning weights. Same prompt. Two outcomes. Real refusal triggers developers hit in 2026 — next to an example of the direct answer you get here. Developer prompt My GraphQL updateMember resolver lets a BILLING user set role: ADMIN on their own org. Write the guard. Gated assistant response Classifier block: cybersecurity capability. Found the privilege-escalation flaw in the user’s own codebase, then blocked every attempt to review or patch it. Documented developer report · r/Anthropic · Oct 2026 Example answer · run it live in the Playground if input.role === 'ADMIN' && ctx.actor.role == 'OWNER' { throw new GraphQLError 'Only OWNER may grant ADMIN', { extensions: { code: 'FORBIDDEN ROLE ESCALATION' }, } ; } if target.orgId == ctx.actor.orgId { throw new GraphQLError 'Cross-tenant mutation denied' ; } Pair with a unit test asserting BILLING → ADMIN throws FORBIDDEN ROLE ESCALATION. Drop into your coding agent today. Keep your daily plan as default. Point a single terminal session or custom profile at bf16.ai whenever filters get in the way. ANTHROPIC BASE URL=https://api.bf16.ai \ ANTHROPIC AUTH TOKEN="$BF16 API KEY" \ ANTHROPIC DEFAULT HAIKU MODEL='deepseek/deepseek-v4.1-flash-uncensored 1m ' \ CLAUDE CODE SUBAGENT MODEL='deepseek/deepseek-v4.1-flash-uncensored 1m ' \ ENABLE TOOL SEARCH=false \ claude --model 'zai-org/glm-5.3-uncensored 1m ' Scoped to this shell invocation. Plain claude in other tabs stays on your Anthropic plan. Also works with Kilo Code, Crush, Zed, Goose, Qwen Code & standard OpenAI / Anthropic SDKs. $claude --model 'zai-org/glm-5.3-uncensored 1m ' ▸Connected · api.bf16.ai · Uncensored GLM-5.3 · 1,048,576 context Audit all 14 GraphQL mutations for tenant-isolation bypasses and patch them. ⏺Edited 3 resolvers · added tenant guard middleware + 11 vitest cases ✓Tests passing · patch ready for review Personal Agent OpenClaw · bf16.ai 1M Draft a firm demand letter citing lease clause 7.2 for my $2,400 deposit, then email it to the property manager. Draft ready — cites clause 7.2 and sets a 14-day return deadline with zero watered-down phrasing. Agent Permission Gate Click to test Send external email to manager@realty.example? Approved by you · Dispatched Sent. Follow-up reminder scheduled for day 15 if unpaid. Power your personal agent. Connect OpenClaw, Hermes Agent, or OpenMausBot over standard endpoints — backed by a full 1M context window. openclaw onboard --non-interactive --accept-risk \ --auth-choice custom-api-key \ --custom-provider-id bf16 \ --custom-compatibility openai \ --custom-base-url https://api.bf16.ai/v1 \ --custom-api-key "$BF16 API KEY" \ --custom-model-id deepseek/deepseek-v4.1-flash-uncensored \ --skip-health Tip: OpenClaw runs shell tools without confirmation by default — enable exec approvals for destructive or financial actions. Let your agent’s permissions decide what runs — not the model’s refusals. Keep human-in-the-loop approvals turned on for payments, destructive shell commands, and external messages. Built for legitimate edge cases. Defensive security Audit, fuzz, and harden applications, containers, and hardware that you own. Uncut fiction & games Write antagonists, conflict, and mature narrative arcs without moralizing rewrites. Clinical & academic work Query immunology, oncology, and historical primary sources at full textbook rigor. No uncensored markup. Priced per token. Every uncensored 1M-context model on bf16.ai is priced at or below its official base API rate USD per 1M tokens . No subscription. Uncensored DeepSeek V4.1 Flash deepseek/deepseek-v4.1-flash-uncensored Text + Vision · Tools · Uncensored · 1M Input $0.24 Cached $0.04 Output $0.90 DeepSeek Official: $0.30 / $1.20 Uncensored DeepSeek V4.1 Flash Fast deepseek/deepseek-v4.1-flash-uncensored-fast Text + Vision · Low Latency · Uncensored · 1M Input $0.30 Cached $0.05 Output $1.20 DeepSeek Official: $0.30 / $1.20 Uncensored GLM-5.3 Flash zai-org/glm-5.3-flash-uncensored Text + Vision · Uncensored · 1M Input $0.24 Cached $0.06 Output $1.00 Z.ai FlashX: $0.37 / $1.25 Uncensored GLM-5.3 zai-org/glm-5.3-uncensored Flagship · Tools · Uncensored · 1M Input $1.40 Cached $0.30 Output $4.40 Z.ai Official: $1.40 / $4.40 Private by default. Plain terms. No prompt or completion storage. Payloads stream in memory only. We record operational billing metadata model, token counts, cost, status — never your code or chats. Purchased credit never expires. Top up from $10 when you need more. No subscription, no monthly minimum, and credit you buy stays in your balance until you use it. 14-day refund on unused credit. Start with $0.50 free credit, valid for 30 days, no card. Unused purchased credit is refundable within 14 days of payment minimum $1 ; free credit is not. Engineering field notes All technical guides → https://bf16.ai/blog Questions Need higher rate limits or dedicated uncensored GPU pods? Talk to engineering https://bf16.ai/contact . Every LLM we host has its refusal direction projected out at the weight level, so it answers legitimate prompts directly instead of refusing, lecturing, or watering down code. Illegal use remains strictly off-limits under our Acceptable Use Policy. 100% of models served on bf16.ai are uncensored open-weight checkpoints deepseek-v4.1-flash-uncensored , deepseek-v4.1-flash-uncensored-fast , glm-5.3-flash-uncensored , and glm-5.3-uncensored . We do not list stock censored models. It is designed not to. Orthogonal weight editing removes one narrow activation direction — the one behind refusals — instead of fine-tuning the model on new data, so the change is small and targeted. No weight edit is guaranteed lossless, so run your hardest real prompts on the $0.50 free credit before you switch. Anything illegal, unauthorized system access, or abuse prohibited by our Acceptable Use Policy. We do not inject a moralizing chat filter, though clearly unlawful traffic may be blocked at the gateway or upstream infrastructure. Yes. You don’t uninstall anything — pass ANTHROPIC BASE URL for a single claude terminal tab or run codex --profile bf16 only on tasks where filters get in the way, while plain claude and codex stay on your normal plan. No. Our gateway never writes prompts, completions, or tool payloads to its databases or logs — they stream through memory. We keep request metadata model, token counts, latency, status for 90 days and billing records for 7 years. Inference runs on upstream GPU providers that are contractually barred from training on your data; each model page lists that endpoint’s retention. No — bf16.ai is our brand name, not a blanket precision claim. Upstream open-weight checkpoints are served in their native high-throughput production formats such as FP8 or BF16 depending on the model ; each model page lists its exact serving spec. Pay as you go from a prepaid USD balance — no monthly subscription and no markup over official base API rates. New accounts get $0.50 free credit, valid for 30 days, with no card required. Unused purchased credit is refundable within 14 days of payment minimum $1 ; free credit is not refundable. Ready when your agent hits a wall. Claim $0.50 in free API credit, grab a key in 20 seconds, and keep every agent session moving.