Open-Weight AI License Tracker: What You Can Actually Do With Each Model
“Open weights” no longer means one set of rules. DeepSeek, Xiaomi, Google and others publish under plain MIT or Apache 2.0, while the largest new models from Meta, Moonshot, Z.ai, Alibaba and MiniMax carry custom licenses. This tracker shows what each license lets an ordinary business do, and which terms deserve a second read. Last checked October 19, 2026.
Key takeaways
- As of October 19, 2026, eight open-weight model families in this tracker use plain MIT or Apache 2.0 licenses, including DeepSeek V4.1 Flash, Xiaomi MiMo-V2.6, GLM-5.3-Flash, Qwen3.8-27B and Google Gemma 4.
- Five of the largest recent open-weight models use custom licenses: Meta’s Muse Model License, Moonshot’s Kimi K3 License, Z.ai’s “glm-5.3” license, Alibaba’s Qwen3.8-Max license and MiniMax’s “minimax-community” license.
- Most custom conditions target large model-as-a-service providers: Z.ai’s security review starts at $10B in annual revenue, Alibaba’s separate license at $50M, and Meta’s notify-and-sign rule at $20M in gross revenue over any 12 months.
- Meta’s Muse Model License requires every product built on Muse Spark Open to display “Built with Muse Spark Open”, with no revenue or user threshold, and its usage policy bans unauthorized practice of finance, law and medicine.
- Licenses are tightening at the top of the market: GLM-5.2 was MIT and GLM-5.3 is custom, Kimi K2 used Modified MIT and Kimi K3 uses a custom license, while Google moved the other way with Gemma 4 under Apache 2.0.
Open Weights No Longer Means One License
Downloadable weights tell you that you can run a model on your own hardware. They don’t tell you what you may do with it. That used to be a footnote, because most popular open models shipped under MIT or Apache 2.0. In 2026 the licenses split, and the split runs right through some model families: GLM-5.3-Flash is MIT while GLM-5.3 is not, and Qwen3.8-27B is Apache 2.0 while Qwen3.8-Max is not.
The models a business is likely to consider now fall into three groups.
- Permissive — MIT or Apache 2.0. Commercial use, modification and redistribution are allowed. You keep the license notice when you redistribute the weights, and that is about it.
- Custom — A license written by the developer. Commercial use is generally allowed, but with some mix of attribution, revenue or user thresholds, model-as-a-service clauses and a usage policy.
- Not yet announced — The model is out on an API and weights are promised, but the license hasn’t been published. MiniMax M3.1 Flash and Mistral Large 4 sit here.
This is not legal advice. The table below summarizes vendor announcements, press coverage and third-party license guides. Where a term is “reported”, we have not seen it confirmed in the license text. Before you deploy, read the license file in the model’s own repository on Hugging Face or GitHub, for the exact version you download, and ask counsel about anything that touches your business model.
The Master Table: 15 Open-Weight Models and Their Licenses
“Your own product” means a model built into software or a service you sell, such as a feature in your app. “Model-as-a-service” means selling access to the model itself, for example as a hosted API. Source numbers refer to the References at the end of this page.
| Model (developer) | License | Commercial internal use | In your own product | Attribution required | Revenue / MAU thresholds | Model-as-a-service clause | Notable usage restrictions | Source |
|---|---|---|---|---|---|---|---|---|
| Permissive: MIT or Apache 2.0 | ||||||||
| DeepSeek V4.1 Flash (DeepSeek) | MIT | Yes | Yes | No product label; keep the license notice | None | None | None in the license | [12], [13] |
| MiMo-V2.6-Pro and -Flash (Xiaomi) | MIT, with open training code and RL environments | Yes | Yes | No product label; keep the license notice | None | None | None in the license | [14] |
| GLM-5.3-Flash (Z.ai) | MIT | Yes | Yes | No product label; keep the license notice | None | None | None in the license | [7] |
| Qwen3.8-27B (Alibaba) | Apache 2.0 | Yes | Yes | No product label; keep the license and notices | None | None | None in the license | [9] |
| Gemma 4: E2B, E4B, 26B MoE, 31B (Google) | Apache 2.0, replacing Google’s earlier custom Gemma terms | Yes | Yes | No product label; keep the license and notices | None | None | None in the license | [15] |
| Beam 1.0 (Reflection AI) | Apache 2.0, vendor-stated; weights reported October 16 | Yes | Yes | No product label; keep the license and notices | None | None | None in the license | [16], [17] |
| Command A+ (Cohere) | Apache 2.0 | Yes | Yes | No product label; keep the license and notices | None | None | None in the license | [18] |
| Kolibri-1 (Aleph Alpha) | Apache 2.0, per a release tracker | Yes | Yes | No product label; keep the license and notices | None | None | None in the license | Release tracker; confirm in the repository |
| Custom licenses with conditions | ||||||||
| Muse Spark Open (Meta) | Muse Model License | Yes | Yes, with attribution | “Built with Muse Spark Open” in the UI, documentation, website or settings; also applies to derivatives, including models trained on its outputs | No MAU threshold and no geographic limit | Above $20M gross revenue in any 12 months, notify Meta and sign a separate agreement before serving it to third parties; internal and in-product use exempt | Bans military, warfare, nuclear and espionage uses; uses with a risk of death or bodily harm, including operating critical infrastructure; unauthorized practice of regulated professions (finance, law, medicine) | [1], [2], [3] |
| Kimi K3 (Moonshot AI) | Kimi K3 License (replaced Kimi K2’s Modified MIT) | Yes, per reported terms | Yes; branding at very large scale (reported) | Branding or attribution for derivatives above 100M monthly active users or $20M monthly revenue (reported) | 100M MAU or $20M monthly revenue; about $20M trailing revenue for resale (reported) | Separate agreement for model-as-a-service resale above roughly $20M trailing revenue (reported) | Not covered by our sources; read the license file | [2], [5], [6] |
| GLM-5.3 (Z.ai) | Bespoke “glm-5.3” license (GLM-5.2 was MIT) | Yes, per reported terms | Yes, per reported terms | None reported | $10B annual revenue, for model-as-a-service businesses | Model-as-a-service businesses above $10B annual revenue must pass Z.ai’s security review | None reported beyond the main condition | [2], [7] |
| Qwen3.8-Max (Alibaba) | Custom, non-Apache; details partly unresolved | Yes; internal use is exempt | Yes, unless you run an “AI work assistant” business above $50M revenue | One report: prominent model-name display above 100M MAU or $20M monthly revenue | $50M revenue in any 12 months; 100M MAU or $20M monthly revenue (one report) | Model-as-a-service or “AI work assistant” businesses above $50M revenue in any 12 months need a separate license | Not fully reported; read the license file | [8] |
| MiniMax M3 (MiniMax) | “minimax-community” license | Yes, after a one-time notice; prior written authorization above $20M yearly revenue | Yes, with attribution | “Built with MiniMax M3”; covers fine-tuned derivatives | $20M yearly revenue for the organization | No separate clause reported; the $20M organization rule applies | Not covered by our sources; read the license file | [10] |
| Not yet announced | ||||||||
| MiniMax M3.1 Flash (MiniMax) | Not announced; weights promised for October 23, 2026 | Unknown | Unknown | Unknown; its predecessor M3 requires “Built with MiniMax M3” | Unknown | Unknown | Unknown | [11] |
| Mistral Large 4 (Mistral) | To be determined; preview API only, weights expected | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | Release reports |
Two rows deserve a closer look. MiniMax M3 is the one custom license in the table whose terms reach a small company directly: according to a published guide to the license, an organization below $20M in yearly revenue owes MiniMax a one-time notice, and one above it needs prior written authorization. And Muse Spark Open’s attribution and usage terms apply at any size, which the next two sections cover.
Who the Custom Conditions Actually Hit
Read the custom licenses side by side and most of the friction lands on a narrow group: companies that resell access to the model itself at scale. A 40-person firm running a model for internal document work, or inside a customer-facing app, sits well below most of these lines. Meta’s license says so explicitly for Muse Spark Open, and Alibaba’s exempts internal use of Qwen3.8-Max.
| Condition | Model | When it applies | Likely to affect a 10–200 person company? |
|---|---|---|---|
| Pass Z.ai’s security review | GLM-5.3 | Model-as-a-service business above $10B annual revenue | No |
| Separate license | Qwen3.8-Max | Model-as-a-service or “AI work assistant” business above $50M in any 12 months | Rarely |
| Notify Meta and sign a separate agreement | Muse Spark Open | Serving the model to third parties with more than $20M gross revenue in any 12 months | Only if you resell model access at that scale |
| Separate agreement (reported) | Kimi K3 | Model-as-a-service resale above roughly $20M trailing revenue | Only if you resell model access at that scale |
| Branding for derivatives (reported) | Kimi K3 | Above 100M monthly active users or $20M monthly revenue | No |
| One-time notice, or written authorization above $20M yearly revenue | MiniMax M3 | Any organization using the model, per a license guide | Yes |
| “Built with …” label | Muse Spark Open, MiniMax M3 | Any product built on the model or a derivative | Yes, if you ship a product |
| Usage policy | Muse Spark Open | Every user, at any size | Yes, in regulated professions and critical infrastructure |
The attribution duty is easy to underestimate. If a software firm builds a client portal on Muse Spark Open, the portal needs a visible “Built with Muse Spark Open” somewhere in the interface, documentation, website or settings. The duty follows the model into fine-tunes and, for Muse, into models trained on its outputs. MiniMax M3’s “Built with MiniMax M3” requirement also covers fine-tuned derivatives. Neither is a burden, but both are easy to forget when a prototype becomes a product.
Muse Spark Open and Regulated Professions
Meta released Muse Spark Open’s weights on October 15, 2026 and calls it “the most capable US open-weight model to date”. Its license is generous in most respects: free use, modification, fine-tuning, distillation and redistribution, commercial use internally and in your products, no claim on outputs, and none of the user caps or geographic limits of older Llama licenses.
The usage policy is where clinics, accounting firms and law practices should slow down. According to coverage of the license, it bans uses with a risk of death or bodily harm, including operating critical infrastructure, and the unauthorized practice of regulated professions, naming finance, law and medicine. It also bans military, warfare, nuclear and espionage uses, and the usual illegal and harmful ones.
The operative word in the professions clause appears to be “unauthorized”. A family-medicine clinic summarizing charts that a physician reviews, or a law firm drafting documents a lawyer signs, looks different from a public chatbot that gives medical or legal advice with no licensed professional behind it. That reading is ours, not Meta’s, and it is not legal advice. If your work sits anywhere near the line, have counsel read the policy against your actual workflow. Utilities and companies whose software controls physical equipment should read the bodily-harm clause the same way.
MIT and Apache 2.0 contain no usage policy at all. That doesn’t relax your professional obligations, which apply whatever model you use, but it removes a second set of rules written by the model vendor.
The Simplest Models to Deploy: MIT and Apache 2.0
If you want no license questions beyond keeping a notice file, start with the permissive group. The five below are also the ones whose sizes we can map to Mac Studio memory. Footprints are rough figures at 4-bit quantization; the suggested uses are Faraday’s editorial view. Where a 1- to 3-bit build changes the fit, the Fits column says so; those lower-bit builds trade some quality, most noticeably on long or precise work.
| Model | License | Parameters (total / active) | Roughly at 4-bit | Fits | Good fit for |
|---|---|---|---|---|---|
| Qwen3.8-27B | Apache 2.0 | 27B dense | ~17 GB | 1 Mac Studio, 128 GB | Fast coding, multilingual work, image and video understanding |
| MiMo-V2.6-Flash | MIT | 309B / 15B | ~170 GB | 2 units, 256 GB | Cost-efficient generalist |
| GLM-5.3-Flash | MIT | 320B / 18B | ~180 GB | 2 units, 256 GB; 1 unit as Unsloth’s 1- to 2-bit build (about 93–109 GB) [22] | General business work, document analysis, multimodal input |
| DeepSeek V4.1 Flash | MIT | 552B / 16B, plus a ~196B Engram memory | ~400–445 GB [20] | 3 units, 384 GB, as a 1- to 3-bit build (about 250–350 GB) [21]; 4 units, 512 GB, at 4-bit | Agentic coding and long-context work |
| MiMo-V2.6-Pro | MIT | 1.02T / 42B | ~560 GB | About 6 or more units | Highest-scoring open model: 46 on Artificial Analysis Intelligence Index v4.3.2 [19] |
Three more Apache 2.0 options round out the group: Google’s Gemma 4 family, up to a 31B dense model; Cohere’s Command A+, 218B total with 25B active; and Reflection AI’s Beam 1.0, 501B total with 23B active, whose Apache 2.0 license is vendor-stated and whose weights were only reported on October 16. For Beam, check that the license file in the repository matches the announcement before you build on it.
The License Trend: Tighter at the Top
The pattern across 2026 is consistent. Developers keep small and mid-sized models permissive and put conditions on the flagship. A few have moved the other way.
| Family | Before | Now | Direction |
|---|---|---|---|
| GLM (Z.ai) | GLM-5.2: MIT | GLM-5.3: custom; GLM-5.3-Flash: MIT | Tighter at the top |
| Kimi (Moonshot AI) | Kimi K2: Modified MIT | Kimi K3: custom Kimi K3 License | Tighter |
| Qwen3.8 (Alibaba) | — | 27B: Apache 2.0; Max: custom | Split by size |
| Gemma (Google) | Custom Gemma terms | Gemma 4: Apache 2.0 | Looser |
| Meta | Older Llama licenses with user caps and geographic limits | Muse Model License: no user cap or geographic limit, but attribution and a usage policy | Different conditions |
| Beam (Reflection AI) | New entrant | Beam 1.0: Apache 2.0 (vendor-stated) | Permissive |
Two practical lessons follow. First, a license check belongs to a version, not a family. A team that approved GLM-5.2 under MIT in June cannot assume GLM-5.3 carries the same terms. Second, the custom terms so far are aimed at large companies reselling model access, not at businesses running a model for their own work. That could change with any release, which is why MiniMax M3.1 Flash, due as open weights on October 23, stays in the “not yet announced” group until its license file appears.
Before You Deploy: A License Checklist
Work through these before any open-weight model goes live.
- Read the license file itself — Open the LICENSE file in the model’s Hugging Face or GitHub repository. Blog posts, press coverage and this tracker are summaries.
- Match the exact version — Check the license for the precise model and size you download. GLM-5.3 and GLM-5.3-Flash, or Qwen3.8-27B and Qwen3.8-Max, carry different terms.
- Place the model in a group — Permissive, custom or not yet announced. If there is no license file yet, don’t deploy it in production.
- Describe your use in one line — Internal tool, feature inside a product you sell, or access to the model sold as a service. Most custom clauses turn on this distinction.
- Compare your numbers to the thresholds — Note how each license measures revenue (yearly, monthly, trailing, any 12 months) and whether it counts your company or only a model-as-a-service business.
- Send any required notices — MiniMax M3 asks for a one-time notice, or prior written authorization above $20M in yearly revenue. Keep a copy of what you sent.
- Plan the attribution — Decide where “Built with Muse Spark Open” or “Built with MiniMax M3” will appear before the product ships, and carry it into fine-tuned versions.
- Test the usage policy against your industry — Health, legal, financial and infrastructure work should get a counsel review against Muse’s policy, or a permissive model instead.
- Keep the data question separate — A license governs the weights, not where your prompts go. Running the model on your own hardware is what keeps client data in the building; see how cloud AI data can train competitors’ models.
- File the license with the weights — Save the license text, version and download date alongside the model, so you can show which terms applied when you deployed.
Where Faraday Fits
Faraday Machines installs open-weight models on Mac Studio hardware in Toronto. Four of the five models on our standard list, DeepSeek V4.1 Flash, GLM-5.3-Flash, Qwen3.8-27B and MiMo-V2.6-Flash, are MIT or Apache 2.0. The fifth, MiniMax M3, uses the minimax-community license, so we flag its attribution and notice terms to clients who choose it. Kimi K3, GLM-5.3 and MiMo-V2.6-Pro are available on larger clusters; the first two carry custom licenses.
Muse Spark Open is a different hardware class. The supported Mac configurations reported at launch are two M5 Ultra Mac Studios with 512 GB each, or four with 256 GB [4]. For a broader comparison of what these models do, see Open Source AI Models Compared.
Frequently Asked Questions
Can a business use open-weight AI models commercially?
Yes, for most models and most uses. MIT and Apache 2.0 models such as DeepSeek V4.1 Flash, GLM-5.3-Flash and Qwen3.8-27B allow commercial use with no conditions beyond keeping the license notice. The custom licenses on Muse Spark Open, Kimi K3, GLM-5.3 and Qwen3.8-Max are reported to leave internal business use free, but add attribution, usage-policy or model-as-a-service conditions. MiniMax M3 asks even small companies for a one-time notice.
Do I have to display “Built with Muse Spark Open” in my product?
Yes, if your product uses Muse Spark Open. Meta’s Muse Model License requires products to display “Built with Muse Spark Open” in the user interface, documentation, website or settings, and there is no revenue or user threshold below which the duty disappears. It also passes to derivatives, including models trained on Muse’s outputs. If you only use the model internally, check the license text for what, if anything, it expects.
Can a clinic, accounting firm or law practice use Muse Spark Open?
Possibly, but read Meta’s usage policy first. The Muse Model License bans the unauthorized practice of regulated professions, naming finance, law and medicine, and any use that carries a risk of death or bodily harm. A licensed professional using the model under supervision looks different from a tool that advises the public on its own, but that line is a question for your lawyer. MIT and Apache 2.0 licenses contain no usage policy.
Which open-weight AI models have the simplest licenses?
Models under MIT or Apache 2.0 are the simplest: no product label, no revenue thresholds and no usage policy inside the license. As of October 19, 2026 that includes DeepSeek V4.1 Flash, Xiaomi MiMo-V2.6-Pro and -Flash and GLM-5.3-Flash under MIT, and Qwen3.8-27B, Google Gemma 4, Cohere Command A+ and Reflection AI Beam 1.0 under Apache 2.0 (vendor-stated for Beam).
Is GLM-5.3 still MIT licensed?
No. GLM-5.3 uses a bespoke “glm-5.3” license, while its predecessor GLM-5.2 was MIT. The main condition is that model-as-a-service businesses above $10 billion in annual revenue must pass Z.ai’s security review, so ordinary companies are unlikely to be affected. The smaller GLM-5.3-Flash, with 320B total and 18B active parameters, keeps the plain MIT license.
References
[1] Trending Topics. (2026). Coverage of the Muse Model License for Muse Spark Open. Available at: trendingtopics.eu
[2] BERI. (2026). “Meta Muse Spark Open 816B open weights: license, critical infrastructure ban, $20M hosting clause vs Kimi K3 and GLM-5.3.” Available at: beri.net
[3] Meta. (2026). “Muse Spark Open.” October 15, 2026. Available at: research.meta.ai; model repository: huggingface.co/meta-models/Muse-Spark-Open-816B-A42B
[4] Apple Machine Learning Research. (2026). Distributed inference with MLX, including Muse Spark Open on M5 Ultra Mac Studio configurations. Available at: machinelearning.apple.com
[5] VentureBeat. (2026). “China’s Moonshot AI releases Kimi K3, the largest open-source model ever.” Available at: venturebeat.com
[6] OpenRouter. (2026). “Kimi K3: open source.” Available at: openrouter.ai
[7] Digital Applied. (2026). “GLM-5.3 weights: a bespoke license, not MIT.” Available at: digitalapplied.com
[8] South China Morning Post. (2026). “Alibaba adds commercial restrictions to open-weight Qwen3.8-Max AI model.” Available at: scmp.com
[9] eWeek. (2026). Alibaba Qwen3.8-27B license coverage. Available at: eweek.com
[10] MiniMax M3 license guide. (2026). “MiniMax M3 license.” Available at: minimax-ai.chat
[11] MiniMax. (2026). “MiniMax M3.1 Flash.” October 19, 2026. Available at: minimax.io
[12] VentureBeat. (2026). “DeepSeek V4.1 Flash debuts.” Available at: venturebeat.com
[13] NVIDIA. (2026). “DeepSeek V4.1 Flash model card.” Available at: build.nvidia.com
[14] The Next Web. (2026). Xiaomi MiMo-V2.6 open-weight release. Available at: thenextweb.com
[15] DataNorth. (2026). “Google releases Gemma 4 open models.” Available at: datanorth.ai
[16] Reflection AI. (2026). “Introducing Beam.” Available at: reflection.ai
[17] TechCrunch. (2026). “Reflection debuts Beam, an open-weight AI model.” October 5, 2026. Available at: techcrunch.com
[18] Cohere. (2026). “Command A+” changelog, May 2026. Available at: docs.cohere.com
[19] Artificial Analysis. (2026). “Artificial Analysis Intelligence Index” (v4.3.2 leaderboard). Available at: artificialanalysis.ai
[20] modelfit.io. (2026). “DeepSeek V4.1 Flash Mac memory requirements.” Available at: modelfit.io; DeepSeek model repository: huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash
[21] Unsloth. (2026). “DeepSeek-V4.1-Flash-1017-GGUF.” Available at: huggingface.co
[22] Unsloth. (2026). “GLM-5.3-Flash” documentation. Available at: unsloth.ai
Pick a Model You Can Deploy With Confidence
Faraday Machines installs open-weight models on Mac Studio hardware in Toronto, starting with MIT and Apache 2.0 models such as DeepSeek V4.1 Flash, GLM-5.3-Flash, Qwen3.8-27B and MiMo-V2.6-Flash. Tell us how your team plans to use AI and we’ll walk through which models fit your hardware and which license terms to bring to your lawyer.
Talk to Us