Title card for Venice AI reading 141 text models and three privacy labels.
Guides & Insights

Venice AI: 141 Text Models, Three Privacy Labels, and One Word Doing Too Much Work

Author

Rowan Sterling

Date Published

Latest models · 20View all models →
Benchmarks: Artificial Analysis · updated daily
Back to all posts

Venice AI's documentation opens by advertising "390+ models" and "100+ text models." Its own models page then lists 141 text models. Both numbers can be true at once — one counts every endpoint including image, video, audio and embeddings, the other counts only chat — but the gap is the first thing worth understanding about the platform, because it tells you what kind of product this is. Venice is not a model lab and not a single-model API. It is a broker: one OpenAI-compatible key in front of a catalogue it resells, with a privacy label on every row. How you read those labels, and how you read the word "uncensored" that the marketing leans on, is the whole of this piece.

What the API actually is

The base URL is code>https://api.venice.ai/api/v1/code>, authentication is a bearer key, and the chat endpoint — code>/chat/completions/code> — is presented as a drop-in replacement for the OpenAI equivalent, streaming, function calling and vision included. From there the surface widens well beyond text:

• Text — chat completions with streaming, function calling and vision, plus embeddings and file inputs.

• Image — generation, image-to-image, and upscaling. The image documentation is where the word "uncensored" is used explicitly.

• Audio — text-to-speech, transcription, voice changing, and more than 50 voices.

• Video — text-to-video, image-to-video, reference-to-video, with asynchronous jobs and an upfront quote before a job is queued.

• Tooling — MCP tools, and wallet-based payment alongside card and crypto.

Venice AI documentation landing page showing the OpenAI-compatible chat completions endpoint, image and audio endpoints, and the claim of 100+ text models.

That quote-before-you-run behaviour on video is the most interesting design choice in the list. Per-request video jobs are the one part of a generative API where a user can accidentally commit real money to an unknown quantity, and pricing it as an estimate rather than a meter reading is the honest way to sell it.

The three labels, and what a label can and cannot tell you

Every text model on the page carries one of three tags, and the split is not a marketing flourish — it is the actual segmentation of the catalogue:

• Anonymized — 68 models. You are talking to the model vendor's endpoint, with your identity separated from the request. Claude Opus 5.5 at $4.00 / $20.00 per million tokens sits here, as does GPT-6.1 Terra at $1.00 / $5.00 and Gemini 4 Argon at $2.50 / $12.50.

• Private — 61 models. These look like weights Venice runs itself rather than a passthrough: the DeepSeek V4 family, Kimi K3 at $3.75 / $18.75, Grok 4.7 at $2.27 / $6.80, the GLM line, and the Venice-branded uncensored models.

• E2EE · Private — 12 models, including Qwen 3.8 27B and a Gemma 4 uncensored build, where the request is end-to-end encrypted.

The useful reading is that a label is a claim about provenance and routing, not a promise about logs. This matters because the word people search for is not "anonymized." It is privacy, and privacy is the one property a broker cannot fully verify on your behalf: whether a request is retained, for how long, and by whom is a function of the endpoint the request ultimately reaches. The public page we reviewed describes the labels and the routing tiers; what it does not carry is an explicit no-logging or retention promise. That is not an accusation — plenty of vendors keep that in a policy document rather than a product page — but it does mean the label is the beginning of the question, not the answer to it.

"Uncensored" is a SKU, not a switch

This is the distinction that the search demand keeps flattening. Venice does not sell an uncensored version of its catalogue; it sells specific uncensored checkpoints, and they are priced as their own line items:

• Venice Uncensored 1.2 — $0.20 / $0.90 per million tokens, 128K context, labelled Private.

• Venice Role Play Uncensored — $0.50 / $2.00, 128K, Private.

• DeepSeek V4.1 Flash Uncensored — $0.33 / $1.32, against $0.30 / $1.20 for the standard build of the same model.

• DeepSeek V4.1 Flash 1017 Uncensored — the same price as the other uncensored V4.1 Flash row, distinguished by checkpoint date.

• Gemma 4 Uncensored — $0.1625 / $0.50, and an E2EE variant of the same build at $0.19 / $0.88.

• GLM 4.7 Flash Heretic — $0.07 / $0.40, a community-abliterated checkpoint of a mid-size GLM.

Two things follow. First, the "uncensored" advantage is model-specific: asking for Claude Opus 5.5 or Kimi K3 on this platform gets you the vendor's own model, with the vendor's own refusals, under a privacy label. The unrestricted branding applies to particular builds, several of which are community checkpoints rather than first-party releases. Second, the price of an uncensored build is not the price of the standard one — V4.1 Flash Uncensored costs about 10% more per token than V4.1 Flash on the same platform, which is what it costs to run a checkpoint nobody at the vendor supports.

img src="3.png"> If you are choosing a platform because you want an abliterated model, then, the question to ask is not "does it have uncensored models?" but "which checkpoint, at what context, and who maintains it?" A heretic build from a community uploader and a named, versioned uncensored release are different products even when they sit three rows apart in the same catalogue.

A six-row scoreboard for Venice AI: 141 text models, 68 anonymized, 61 private, 12 end-to-end encrypted, 5 uncensored SKUs, and an OpenAI-compatible API.Venice AI's model catalogue listing 398 models with privacy tier badges, including an uncensored DeepSeek build priced at $0.33 input and $1.32 output.

The meter is credits, and it is not a per-token meter

Venice sells its API through a balance rather than a bare rate card, and the mechanics are worth reading before you budget anything:

• Balances are dollar-denominated — one unit equals one dollar — and card-purchased credits do not expire.

• Charges are deducted in a fixed order: DIEM first, then earned credits, then bundled credits, then USD.

• Staking one DIEM generates $1 per day of credits that refresh daily; the allowance scales linearly with the stake.

• Tiers add bundled credit rather than free usage: Pro at $1 per month, Plus at $75, Max at $225, each with a one-time $5 API credit. Accounts upgraded by staking VVV do not receive that credit line.

• Some models are paid-plan-only and return a code>401 PRO_ONLY_MODEL/code>. Insufficient balance returns code>402 INSUFFICIENT_BALANCE/code>.

• Rate limits are set by model and by account tier — Default or Partner — rather than by model price, and the published limits carry no numeric values.

The documentation states plainly that there is no unmetered API tier and that a paid subscription does not buy free calls: free accounts pay the same per-token rates as subscribers, they just do not get bundled credit. That is a cleaner pitch than most credit systems, because it removes the fiction that a $1 subscription is buying inference.

Where the meter sits against the vendor's own list is the practical question. On several rows Venice charges exactly what the model vendor charges — Claude Opus 5.5 at $4.00 / $20.00, GPT-6 Astra at $10.00 / $50.00, GPT-6.1 Terra at $1.00 / $5.00. On others it charges above list: Grok 4.7 at $2.27 / $6.80 against SpaceXAI's published $2.00 / $6.00 under 200K prompt tokens, roughly 13% up, and DeepSeek V4.1 Flash Uncensored at $0.33 against $0.30. Neither pattern is surprising for a reseller — the interesting part is that you cannot tell which pattern applies to a given row without checking the vendor's own page, and the platform does not put that comparison next to the price.

The extras are metered separately, and quietly expensive

Search and scraping are sold as their own SKUs rather than bundled into inference:

• Web search — $10 per 1,000 requests, one cent each.

• Web scraping — $10 per 1,000 URLs.

• X search — $10 per 1,000 results.

For an agent that researches before it answers, those per-call charges can outrun the token bill on a cheap model. A GLM 5.3 Flash call at $0.15 / $0.50 per million tokens is effectively free next to the one-cent web lookup that fed it. Anyone modelling an agent's cost on token prices alone will be wrong here, and the wrongness has a direction.

What to check before you commit a workload

Four things, in this order. First, whether the model you actually want carries a vendor-supported checkpoint or a community one, because that decides whether a bug has anyone to report it to. Second, whether its listed price matches the vendor's own page, because the platform charges list on some rows and above list on others. Third, whether the rate limit for your account tier is documented anywhere you can read, since limits are tied to tier and model rather than to what you paid. Fourth, and least satisfying: whether your retention requirement is satisfied by a label, or needs a document — the labels describe routing, not logs, and the public page we read stops short of a no-logging promise.

Then there is the structural question, which is not about Venice specifically. A credit balance, a staking allowance and bundled tiers are three different meters layered on one account, and none of them is the vendor's per-token price. If your reason for being on the platform is privacy, that trade is worth making. If your reason is that you want the cheapest route to a specific model, a platform that sells you credit rather than tokens is an extra conversion step between the vendor's price and yours — and the rate card for that step is not printed anywhere on the models page.

OrcaRouter sits on the other side of that trade: one OpenAI-compatible endpoint over 200-plus models at 0% markup, where the provider's own published price is what you are billed, and a price cut at the vendor is live the same day because there is no renegotiation step in between. We do not carry Venice's own uncensored SKUs, and nothing here should be read as saying we do. What we do carry is the third-party models those SKUs are built from, at their vendors' rates, alongside automatic failover across providers — which is the honest way to try a checkpoint nobody supports without making it your only path.

What we are watching next: whether the "390+" and "141" ever agree on one page, whether the uncensored line grows beyond the five community builds it currently names, and whether a retention statement appears anywhere in the public documentation. Until the first of those, the number to remember is not the one in the tagline. It is 141 rows, three labels, and a word that only applies to five of them.

Compared in this article2

Detected from this article · Benchmarks: Artificial Analysis · updated daily