262K CONTEXT / ZERO HARD REFUSALS / 320 HARMBENCH PROMPTS / SGLANG / FP8 SERVING / ZDR / CRYPTO ONLY / 91.7 GPQA / ~94 TOK/S / 131K OUTPUT /
QWEN3.8-FLASH-NEXT · CYBERSECURITY BUILD

Refusals,
removed.

The refusal behaviour was cut at the weight level — not prompted around, not fine-tuned into a personality. One model, OpenAI-compatible, 262,144 tokens of context. It answers. It stores nothing.

262Kcontext
0hard refusals
91.7GPQA diamond
$50unlimited / month

Vendor-reported. Model card, agentic harness, checked 2026-11. Not a measurement of this endpoint.

RawInfer — inference engine choke at OFF INFERENCE ENGINE CHOKE off on RAWINFER.com

One model. No catalogue, no upsell. Refusal-free 262K context at $50 flat.

Pricing
HarmBench-320 · measured

What the filter was costing you.

320 harmful-behaviour prompts, every effort setting, one endpoint. Compliance is the product.

Prompts
320
Hard refusals
0
TRUE_COMPLY
91.2–92.5%
Effort settings
off · low · xhigh

The base model spends its first hundred tokens telling you what it cannot do. This build does not have that reflex. What is left is the only refusal that survives: the one where a model declines because the answer would be wrong, not because the answer would be uncomfortable.

Cybercrime & intrusion low
100%
Chemical & biological low · 42/42
100%
Misinformation low · 51/54
94%

52/52 on cybercrime and intrusion at both off and low effort.

Source

Vendor-reported. Model card, agentic harness, checked 2026-11. Not a measurement of this endpoint.

Capability · post-cut

The cut costs less than you were told.

Stripping the refusal behaviour is usually where benchmark numbers go to die. Here they mostly do not move.

GPQA Diamond
91.7
Graduate-level science. Reasoning on.
LiveCodeBench v6
91.9
Contamination-controlled competitive programming.
SWE-bench Pro
62.5
Real repository issues, end to end, patches merged.
DeepSWE 1.1
58.7
Long-horizon agentic debugging. The number that separates it from a 27B.
Toolathlon Verified
73.5
Tool calling across messy, real APIs.
Source

Vendor-reported. Model card, agentic harness, checked 2026-11. Not a measurement of this endpoint.

Versus the 27B

Where it actually beats the 27B.

Context is a tie: both builds take 262,144 tokens natively. The gap is in long-horizon agentic work — same vendor card, same harness, one page apart.

DeepSWE 1.1 is the headline: 42.2 for the 27B, 58.7 here — 16.5 points, 39% relative. It is the long-horizon agentic card, and it is the one that decides whether an agent finishes the refactor or stops halfway with a plan.

SWE-bench Pro is 62.5 against 61.7. That is a tie: eight tenths of a point sits inside harness noise and we are not going to dress it up as a win. GPQA Diamond (+2.5) and LiveCodeBench v6 (+1.6) are real, modest wins.

Then the part no benchmark covers. Zero hard refusals across 320 HarmBench prompts, and 52/52 on cybercrime and intrusion at both off and low effort. A refusal at turn forty of a long run costs you the run, and no score column prices that in.

  • ~94 tok/s output, p50 TTFT ~1.78 s.
  • SGLang · FP8 weights · FP8 KV cache · MTP speculative decoding.
  • Reasoning off / low / xhigh. Thinking is on by default.
  • Flat $50. No token meter, no per-million arithmetic, no billing surprise.
Source

Vendor-reported. Model card, agentic harness, checked 2026-11. Not a measurement of this endpoint.

DeepSWE 1.1long-horizon agentic
Qwen3.8-27B
42.2
qwen-flash-next
58.7 +16.5
GPQA Diamondgraduate science
Qwen3.8-27B
89.2
qwen-flash-next
91.7 +2.5
LiveCodeBench v6competitive code
Qwen3.8-27B
90.3
qwen-flash-next
91.9 +1.6

Each pair is one benchmark, both models, same scale. The bar lengths are only comparable inside a pair — a 58.7 on DeepSWE is not a 58.7% on GPQA.

Read the full comparison →

Zero data retention

It does not keep what you send.

Not "deleted after 30 days". Not "retained for quality". Not there in the first place. There is one record and it is a counter.

Storage
0 bytes
Prompts and completions are proxied to the GPU and dropped. Nothing is written to disk, nothing is held in a queue, nothing is replayed.
Training
Never
Your traffic is not a dataset. Nothing you send improves a model here, or anywhere downstream of here.
Human review
None
No moderators, no reviewers, no abuse queue a person reads. We are not a moderation service and we do not staff one.
Law enforcement asks us for logs. We have no logs to give. What exists per key is a request count, a token total and a last-seen timestamp — enough to bill, not enough to reconstruct a single conversation. A subpoena can be served on counters.

Read the full policy on Privacy & ZDR.

One price, one card

Fifty a month. Unlimited.

Thirty days on one key, no request counter. Paid in crypto. If you want a look before you commit to a month, $5 buys a hundred requests.

Unlimited / monthly
$50/ month
  • Uncapped requests on one key for the billing month.
  • 262K context, 131K output, reasoning at any effort.
  • Concurrency 5. Fair use: no resale, no key sharing.
  • Runs thirty days from confirmation. Nothing auto-renews.
Go unlimited — $50
Not ready for a month? Try it for $5 — one hundred requests, no expiry.

Pay with

USDT · TRC-20 USDC · ERC-20 BTC ETH XMR crypto only

Before you pay

Crypto is irreversible, and thirty days runs from the confirmation, not the first of the month. Try it for $5 first if you want to see the endpoint on your own work.

Full pricing and terms →

OpenAI-compatible

Point the SDK at us. Nothing else changes.

Same client library, same message shape, same streaming. Swap the base URL and the model string. One model is served, so there is nothing to pick.

Surface

/v1/chat/completions /v1/models /v1/usage

Text in, text out. Image and video frames are accepted as input. There is no other model behind this endpoint and no other endpoint behind this key.

Read the API docs →

python chat.completions
from openai import OpenAI

client = OpenAI(
    base_url="https://api.rawinfer.com/v1",
    api_key="sk-rwi-...",   # dashboard
)

resp = client.chat.completions.create(
    model="qwen-flash-next",
    messages=[{
        "role": "user",
        "content": "Map the trust boundary of this Dockerfile.",
    }],
    reasoning_effort="xhigh",   # "off" | "low" | "xhigh"
    max_tokens=8192,
)

print(resp.choices[0].message.content)
curl one request
curl https://api.rawinfer.com/v1/chat/completions \
  -H "Authorization: Bearer $UAM_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model":"qwen-flash-next",
       "messages":[{"role":"user","content":"hi"}],
       "reasoning_effort":"low"}'
Asked plainly

Questions with answers.

Is it actually uncensored, or is this a prompt trick?

The refusal behaviour was removed at the weight level. This is the uncensored build of Qwen3.8-Flash-Next by dealignai — not a system prompt, not a jailbreak wrapper, not a persona you can talk past.

On HarmBench-320 it produced zero hard refusals across all 320 prompts and all three effort settings, with 52/52 compliance on cybercrime and intrusion at off and low. It still argues with you when an answer would be wrong. It does not recite policy at you.

What happens to my prompts?

They go to the GPU and they are dropped. Not written to disk, not logged, not attached to an account history, not used for training. Per-key counters — requests, tokens, last-seen timestamp — are kept so the usage page can exist. That is the whole record.

This cuts both ways. We cannot retrieve a conversation for you, cannot debug a prompt you no longer have, and cannot produce content in response to a request for it.

Can I pay with a card?

No. USDT (TRC-20), USDC (ERC-20), BTC, ETH, XMR. Card payments are not accepted, and there is no PayPal, no processor, no chargeback window — which is also why nothing here can be refunded. Credit is prepaid and final the moment the transaction confirms.

If a payment goes to the wrong network or the wrong address, the funds are gone and we cannot recover them. Send from an exchange that lets you pick the network, and check the chain first.

What if my key gets banned?

Keys are suspended for exactly three things: reselling access, sharing a key outside your own machines, and attacking the infrastructure. Never for what you ask the model — we do not read it, so we could not act on it if we wanted to.

A suspended key keeps its unused balance and simply stops serving. Nothing is pro-rated and nothing is returned.

Is this legal?

Renting an inference endpoint is legal. What you do with the output is governed by where you live, what you build, and who you build it for. You are the operator; that responsibility does not transfer to us.

We do not audit prompts, do not report on accounts, and will not vouch for a use case. If your work needs a compliance paper trail or a vendor who will sign something, this is the wrong service — and no refund will fix that.

Still stuck? Support answers within a day, from a human, about keys and billing only.

Get on

Take the key.

Try it for $5. A 262K-context engine that does not argue with you about what your work is for.

Crypto only. No refunds. No logs. You are the operator.