Qwen 3.5 Abliterated: What It Means and Hosted Options

Abliterated Qwen builds are community-modified open-weight checkpoints that no longer refuse most requests. This page explains the method, the trade-offs, and when a hosted endpoint is the easier route.
Key points
- Abliteration removes a learned refusal direction from the weights; it is not a new training run.
- Running a modified checkpoint yourself needs enough GPU memory and a serving stack.
- A hosted OpenAI-compatible endpoint skips the hardware and charges per token.
- This site is an independent service, not the official Qwen API.
What people mean by qwen 3.5 abliterated
When someone searches for qwen 3.5 abliterated, they usually want one of two things: a downloadable checkpoint of a Qwen model that has had its refusal behaviour removed, or a way to talk to such a model without owning a GPU. Both are reasonable goals, and they lead to different setups, so it helps to separate them early.
Qwen is a family of open-weight language models published by Alibaba. The base and instruct releases are trained to decline certain requests. "Abliterated" is the label community uploaders put on a variant where that declining behaviour has been surgically reduced after the fact. The name is a blend of "ablation" and "obliterated", and it stuck.
One caution about version numbers. Model families get new releases often, and uploaders name their files after whichever base they started from. We do not track which exact build is the newest, and nothing on this page claims that our hosted model is any particular Qwen checkpoint. What we can describe accurately is the technique, the practical trade-offs, and the service we run.
How abliteration works
Researchers studying refusal in chat models found that the tendency to refuse can be summarised, to a good approximation, as a single direction in the model's internal activation space. Feed the model a set of prompts it refuses and a set it accepts, compare the hidden states, and the difference points along a "refusal direction".
Abliteration takes that direction and edits the weight matrices so the model can no longer write along it. The edit is a projection applied once to the saved weights. There is no gradient descent over a large dataset, which is why one person with a single machine can publish a modified checkpoint within hours of a base model appearing.
How it differs from fine-tuning
A fine-tune changes behaviour by training on new examples. It can teach a style, a persona or a format. Abliteration only removes a behaviour; it adds nothing. A model that has been abliterated writes in the same voice as the original and keeps the same knowledge, minus most of the hesitation.
Many published "uncensored" models combine both steps: abliterate first, then fine-tune lightly to repair the quality loss. If a model card does not say which it used, assume you cannot know.
What it costs in quality
Editing weights is not free. Some abliterated checkpoints lose a little accuracy on reasoning or instruction following, and a few get repetitive or drift out of character in long chats. Quality varies by uploader, by how aggressively the direction was removed, and by the quantisation you download. Treat each build as its own model and test it on your own prompts.
Why the label is not a quality guarantee
Model cards for abliterated uploads are written by individuals, not by a lab with a release process. Claims such as "no refusals" or "same quality as the original" are usually based on a handful of prompts. That is fine for a hobby, but it is thin evidence for anything you intend to depend on.
A sensible check before you build on any build: write twenty prompts from your real use case, including a few that the original instruct model would have declined, run them, and read the answers. Note how often the model stays on task, how it handles a long system prompt, and whether it keeps a format such as JSON. That small test tells you more than a leaderboard number will.
Running an abliterated build yourself
If you want full control, local inference is a legitimate path. You download the weights, pick a quantised format, and serve them with a runtime such as llama.cpp, Ollama or vLLM. Nothing leaves your machine, and you can swap checkpoints whenever you like.
The costs are practical rather than conceptual:
- Memory. The model and its KV cache have to fit in VRAM or fast system RAM. Larger Qwen variants need workstation-class hardware, and long contexts raise the cache size sharply.
- Setup time. Picking a quantisation, chat template and sampler settings takes trial and error. A wrong chat template alone can make a good model look broken.
- Speed. Consumer GPUs and CPU offload produce tokens slowly compared with a server tuned for throughput, which matters for batch jobs.
- Maintenance. New checkpoints appear constantly, so you end up re-downloading and re-testing.
For a hobbyist with a spare card, that is a fun weekend. For a team that needs a stable endpoint inside an application, it is a side project that competes with the real one.
The hosted alternative
We run a hosted API for people who want the behaviour without the hardware. It serves one open-weight model, run by an independent provider and tuned to answer without content refusals for lawful adult use. You call it as uncensored through an OpenAI-compatible interface.
Be clear about what this is and is not. It is not the official Qwen API, and it is not a router that forwards to Alibaba or any other vendor. We do not publish a model card claiming a specific Qwen release, so do not treat the service as a drop-in replacement for one named checkpoint. If you need that exact build, with its exact quirks, run it locally.
If you need an uncensored chat model that behaves the same way every day, with a stable URL, hosting is simpler. The relevant facts:
- Methods:
POST /v1/chat/completionsandGET /v1/models. - Streaming, tool calling and JSON mode are supported.
- Context window of 100,000 tokens, prompt plus completion.
- Text only. No images, audio, video, embeddings or fine-tuning.
- Prompts are not used for training.
- One hard limit: no sexual content involving minors.
The API documentation lists every supported parameter, and the comparison guide goes through how pay-per-token hosting stacks up against other ways of getting a Qwen-style model.
Try it in five lines
Because the interface follows the OpenAI schema, any OpenAI SDK works after changing the base URL and key. Here is the shortest useful example with Python:
from openai import OpenAI
client = OpenAI(
base_url="https://api.qwenabliterated.top/v1",
api_key="YOUR_API_KEY",
)
reply = client.chat.completions.create(
model="uncensored",
messages=[{"role": "user", "content": "Summarise the idea of abliteration in two sentences."}],
)
print(reply.choices[0].message.content)
The same call with curl:
curl https://api.qwenabliterated.top/v1/chat/completions \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"model":"uncensored","messages":[{"role":"user","content":"Hello"}]}'
To list what the key can access, call GET /v1/models. Create a key on the API key page. New accounts can claim $0.50 of trial credit with one click, valid for 7 days and with no card needed, which is enough for a few hundred short test requests.
Local or hosted: a decision list
Choose local inference when:
- You must keep every prompt on your own machine, with no network call at all.
- You need one specific community checkpoint, quantisation or LoRA.
- You already own a suitable GPU and enjoy tuning the stack.
Choose the hosted endpoint when:
- You want to ship an app or bot and need a URL that stays up while you work on something else.
- You need long context without buying memory for it.
- Your usage is bursty, so paying per token beats owning idle hardware.
- You want to reuse existing OpenAI-style client code.
A mixed approach is common: prototype prompts on the hosted API, then decide whether a local build is worth the effort. Because both can speak the same chat format, moving between them mostly means changing a base URL.
What it costs
Pricing is $0.15 per 1M input tokens and $0.50 per 1M output tokens, from prepaid credit with no subscription. Failed or refused requests are not charged, and credit does not expire.
A worked example: a prompt of 3,000 tokens with a 700-token answer costs 3,000 x $0.15 / 1M = $0.00045 for input plus 700 x $0.50 / 1M = $0.00035 for output, so $0.0008 in total. A thousand such calls come to $0.80.
Top-ups are any whole amount from $20 to $500, with a bonus of 5% from $50, 10% from $100 and 15% from $200. You can pay with crypto (USDT on TRC20, USDC on Base). The pricing page has the current table.
More guides
Questions and answers
Is this the official Qwen API?
No. It is an independent service running one open-weight model from an independent provider. It is not operated by Alibaba or any other model vendor.
Is the hosted model a Qwen 3.5 build?
We do not claim a specific Qwen release. You call it as uncensored, and you should test it on your own prompts to see whether it suits your use.
Does abliteration make a model smarter?
No. It removes a refusal behaviour and adds no knowledge. Quality can stay the same or drop slightly depending on the build.
Can I use it with existing OpenAI code?
Yes. Change the base URL and the key, set the model to uncensored, and the standard chat completions calls work, including streaming and tool calling.
What content is not allowed?
The service is built for lawful adult use. Sexual content involving minors is never allowed.
Your key is one form away
Create an account, copy the key, change the base URL. That is the whole setup.
Get API key