Use · Kimi K3

Is it good enough?

Ownership levelPartialnone·limited·partial·substantial·fullAnalytical input D · 53.2/100

This page is a projection of the one entry record, the Reliability factor that Use covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor

AssessUse & modify + Transparency
ImplementData control + Reliability
UseReliability
SupportTransparency

Capabilities & modalities

Kimi K3 is natively multimodal (text, image, video) and frontier-competitive: standout coding, agentic and reasoning capability with a 1M-token context. On public benchmarks it leads other open models on coding and agentic tasks and places 1st on the Frontend Code Arena, while sitting behind only Claude Fable 5 and GPT-5.6 Sol overall.

Context window & long-context behaviour

The model card reports a 1M-token (1048576) context window, reached through a cooldown curriculum that grows the window from 256K to 1M. OneHill has not independently measured effective long-context recall, so treat the 1M maximum as the architectural ceiling rather than a verified working depth.

Function / tool calling

Agentic tool use is a core design goal. The technical report frames long-horizon interaction over many tool calls as central to K3, and the model leads agentic benchmarks (BrowseComp, OSWorld-Verified, agentic search). Expose tools through your serving layer's function-calling API, and, given the documented offensive-cyber capability, allow-list tools and bound their effects.

How this scores

The ownership factor this domain covers, drawn from the one entry record.

ReliabilityIs it reliable and good enough for the job?

Weak

Capability is frontier-competitive, but safety scores 1: no safety tuning, guard, or refusal training, and the report documents offensive-cyber capability the model does not refuse - a model presented as deployable whose safety is left entirely to the adopter. Under the ownership rule, safety <= 1 for a deployable model makes reliability weak regardless of benchmark strength.

How this scores (AOI sub-dimensions)

Operational3/5how practical it is to run, serve and maintain in productionRuns on mainstream serving stacks (vLLM, SGLang, TokenSpeed) with native MXFP4 quantization and community quants available, so there is a practical path to run it - but the 2.8T-parameter scale is a heavy operational burden: minimum viable deployment is a multi-GPU / multi-node cluster (~1.4 TB of weights), there are no small variants, exact hardware guidance is sparse, and the documented stack is narrower than the K2 lineage (no KTransformers / TensorRT-LLM listed).

Safety1/5whether misuse risks are evaluated and guardrails are providedNo safety-tuned release, companion guard model, refusal training, or content filtering is described (model card and report), and the technical report's section 6.2.2 documents offensive-cyber capability - Tier-1 vulnerability discovery and Tier-2 end-to-end exploit development - explicitly noting that frontier Anthropic and OpenAI models refuse these tasks while K3 does not.

What this means for adoptionYou substantially use, modify and commercialise the self-hosted Kimi K3 weights and run them entirely on your own infrastructure, so your data stays yours - but ownership is only partial. The custom, non-OSI licence adds a $20M Model-as-a-Service separate-agreement gate on top of the branding threshold, the training corpus/code/compute are closed, and, most consequentially, the model ships with no safety tuning or guard while its own report shows it performing offensive-cyber tasks that frontier labs refuse. Self-host behind a full external control stack, keep off the train-by-default hosted API if data control matters, and confirm the LICENSE and the Model-as-a-Service threshold before commercial deployment.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Model cardread2026-07-28

Kimi K3 model card on the verified moonshotai Hugging Face org: 2.8T total / 104B active MoE (16 of 896 experts), 1M context, MXFP4 weights / MXFP8 activations, native text+image+video, serving on vLLM/SGLang/TokenSpeed; no training data/code/tokens or safety tuning disclosed.

Licenceread2026-07-28

Kimi K3 License, read verbatim via the raw mirror: grant to use/copy/modify/merge/ publish/distribute/sublicense/sell, plus a Model-as-a-Service separate-agreement requirement over $20M aggregate revenue in any consecutive 12 months, plus a 100M-MAU or $20M-monthly- revenue "display Kimi K3" branding clause; internal-use and official/certified-partner exemptions; not OSI-certified.

Technical_reportread2026-07-28

Moonshot's technical report "Kimi K3: Open Frontier Intelligence" (GitHub PDF), read: 2.8T/104B MoE with Kimi Delta Attention and Per-Head Muon; context curriculum 8K to 64K (pretrain) and 256K to 1M (cooldown); no total training-token count and no absolute pretraining-FLOP figure stated; section 6.2.2 documents offensive-cyber capability (Tier-1 vulnerability discovery, Tier-2 exploit development) and notes Anthropic/OpenAI models refuse such tasks while K3 does not.

Terms of serviceread2026-07-28

platform.kimi.ai model-use agreement, read: user Content may be used to develop and improve the Services, with opt-out only via an enterprise arrangement on request; governed by the laws of Singapore with SIAC arbitration.

Privacy Policyread2026-07-28

platform.kimi.ai privacy policy, read: the hosted service trains on user prompts, audio, images, videos and files by default ("helps us optimize our models"); controller MOONSHOT AI PTE.

Third-party analysisread2026-07-28

Reputable coverage (Tom's Hardware) of the 2.8T Kimi K3 release: architecture (16/896 experts), MXFP4/MXFP8 QAT, K2 comparison, 1st place on the Frontend Code Arena, and positioning behind only Claude Fable 5 and GPT-5.6 Sol overall while ahead of other open models on coding and agentic benchmarks.

Third-party analysisunverified2026-07-28

No public EU AI Act training-content summary, copyright policy, or provider documentation package is published for Kimi K3, and the training corpus, training code and training-compute figures are not released.