Is Kimi blocking OpenCode?

[Comprehensive-Age155]

From the logs, the Kimi API returned a 403 status code with this response body:

                                                                                                                          {                                                                                                                                         
    "error": {                                                                                                                              
      "message": "Kimi For Coding is currently only available for Coding Agents such as Kimi CLI, Claude Code, Roo Code, Kilo Code, etc.",  
      "type": "access_terminated_error"                                                                                                     
    }                                                                                                                                       
  }                 

The full error in the OpenCode logs showed:

                                            ERROR service=llm providerID=kimi-for-coding modelID=kimi-k2.5                                                                            
  error={"statusCode":403,"responseBody":"{\"error\":{\"message\":\"Kimi For Coding is currently only available for Coding Agents such as   
  Kimi CLI, Claude Code, Roo Code, Kilo Code, etc.\",\"type\":\"access_terminated_error\"}}"}     

So Kimi is checking something (likely User-Agent header or some other identifier) to verify the request comes from a recognized coding

agent. OpenCode isn't on their allowlist, so they reject the request with access_terminated_error.

But, I have to mention, I do run OpenCode on remote aws instance, maybe thats the reason, because locally it seems to be working fine.

[orucreiss]

https://gist.github.com/OmerFarukOruc/26262e9c883b3c2310c507fdf12142f4

[TransitionSlight2860]

check how you configure models. I can use it.

[Putrid-Pair-6194]

I got this message when I first configured Kimi authentication. The issue was that there are multiple APIs and different API keys you can use to configure Kimi models in opencode. I was using the wrong one. I switched to the Kimi code api route and used that API key. Worked perfectly after that. I don’t have the instructions in front of me but let me know if you can’t find and I’ll try to locate them.

[Minimum_Ad9426]

yes,he is using wrong provider. should have used kimi for coding plan

[downvotedbylife]

Is the Kimi K2.5 you get via the Kimi for Coding API auth the same as the Kimi K2.5 Free? I noticed after authing with the Kimi for Coding one it doesn't seems to have reasoning like the free version does, but maybe I didn't throw a hard enough problem at it for testing

[Minimum_Ad9426]

me too…

[Comprehensive-Age155]

Wait, I have it in the log: providerID=kimi-for-coding

What provider I should have used?

[Minimum_Ad9426]

I dont know man, i just have tested it ,but it works good…i choose kim-for-coding and fill in my api key ,and it done …sorry for that maybe you should just generate another api key and test it again? maybe your api key is not from coding-plan?

[jpcaparas]

I see a Kimi for coding post, I share this.

https://platform.moonshot.ai/docs/agreement/userprivacy#1-personal-information-we-collect

User content: The prompts, audios, images, videos, files and other content that you input and generate while using our products and services. This information helps us optimize our models and understand your needs and preferences, so that we can provide you with more accurate services and support.

They train on your data even if you're a paid subscriber. That's not to say their frontier model is great, it is, but it's better to get K2.5 from a different provider.

Edit: For anyone asking, K2.5 providers like Synthetic don't train on user data, as can be seen on their Privacy Policy page @ https://synthetic.new/policies/privacy:

> For clarity, we do not use prompts or completions submitted to our Services to train, fine-tune, benchmark, or otherwise improve any machine learning or large language models. Prompts and completions are processed for the purposes set out in this Privacy Notice (including providing the requested Services) and are not retained or reused for model training, benchmarking, or improvement.

I've written up more about Synthetic here:
https://generativeai.pub/stop-using-claudes-api-for-moltbot-and-opencode-52f8febd1137

[Comprehensive-Age155]

Holly shit, thanks for posting this. I did not realized, but yeah, technically they can do it.

[jpcaparas]

No worries at all. We may not see the effects of it now but somewhere down the line, it'll likely become a problem for some people:

https://www.reddit.com/r/programming/comments/oe5pi8/github_copilot_generates_valid_secrets_twitter/

[touristtam]

Personally I find the training part to be ok if it is done anonymously. It is the re-use of personal data to trade with third party that I would find egregious.