China has discovered export controls, the same tool it spent years being on the receiving end of. The Ministry of Commerce has proposed restricting the foreign flow of 23 domestic AI technologies, including models, agents and computing clusters. The twist is that the most visible way foreigners use Chinese AI, a simple API call, is apparently staying open.
What is actually on the table
The word to hold onto is proposed. This is a draft list, not a finished regime, and the details below come from a short report rather than the full text of the proposal.
The reported contents:
- Scope: 23 Chinese AI technologies, covering models, agents and computing clusters.
- Stated reason: national security. The ministry reportedly worries that these technologies could be used to build autonomous malware aimed at civilian infrastructure.
- Other sectors: the restrictions also reach solar energy and biotechnology, including cell and gene therapy.
- What stays open: API access for individual users, plus existing licenses on open-source products and scientific papers, which are expected to be preserved.
So the list is wider than AI alone. Solar and gene therapy sit alongside agents and clusters, which suggests this is less a narrow AI safety measure than a broader decision about which Chinese technologies should leave the country on Beijing's terms.
The security argument, and the mirror
Officially, the case rests on autonomous malicious software. It is a coherent worry, since an agent that can act on its own is a different kind of export than a chatbot that answers questions.
The backdrop, though, is hard to ignore. The report frames the move as a response to years of American efforts to limit Chinese companies' access to advanced chips. Washington restricted what flows into China, and Beijing is now drafting rules for what flows out. Call it reciprocity, or call it a country noticing that export controls are more fun to write than to read.
The diplomatic temperature is oddly mixed. In September, Donald Trump and Xi Jinping agreed that a human should always control nuclear weapons, and the idea of an AI hotline between the two countries was discussed. Competition and cautious coordination are running in parallel, which is roughly how great-power relations tend to work.
What changes for people who use Chinese models
For most developers, probably not much, at least at first. Popular models such as DeepSeek V4.1 Flash and Step 5 Preview are expected to keep circulating abroad. Individual API access remains available, and existing open-source licenses and research papers are expected to stay as they are.
What tightens is access to the most powerful Chinese systems, and the practical effect is subtle. A model you can call over an API is a service. A model whose weights, agent tooling or cluster setup you can take home is an asset. The proposal appears to protect the first while fencing off the second.
The licensing angle
The report points to one practical upside for Chinese companies. The new rules would let them license technology abroad without selling the intellectual property behind it.
That is a tidy arrangement for the exporter. Foreign customers get capability, the Chinese developer collects revenue, and the crown jewels never change hands. For the global market, the likely result is that the most advanced Chinese models end up less open than some had planned, while API availability keeps them visible on the international stage.
What remains unclear
The source leaves several questions open, and it would be unwise to guess at the answers:
- Which specific 23 technologies are on the list, and how "powerful" is defined.
- Whether the proposal will be adopted as written, and when.
- How the line is drawn between individual API users and corporate or institutional customers.
- How the open-source exemption will work in practice for new releases rather than existing ones.
Until those answers arrive, the safest reading is that China is building a licensing gate rather than a wall. Whether the gate swings open easily for some customers and stays shut for others is the kind of detail that rarely appears in the press release.
The takeaway
If you build on Chinese models through an API, keep building, but read the final rules when they appear. If you were counting on the strongest models arriving as downloadable weights, plan for a world where they are rented rather than owned. Export controls have a way of turning every technology into a service, and every service into a negotiation.