diff --git a/crates/tabby/Cargo.toml b/crates/tabby/Cargo.toml
index bc737436615a..06a9ecf58a91 100644
--- a/crates/tabby/Cargo.toml
+++ b/crates/tabby/Cargo.toml
@@ -6,12 +6,11 @@ authors.workspace = true
 homepage.workspace = true
 
 [features]
-default = ["ee", "experimental-http"]
+default = ["ee"]
 ee = ["dep:tabby-webserver"]
 cuda = ["llama-cpp-bindings/cuda"]
 rocm = ["llama-cpp-bindings/rocm"]
 vulkan = ["llama-cpp-bindings/vulkan"]
-experimental-http = ["dep:http-api-bindings"]
 # If compiling on a system without OpenSSL installed, or cross-compiling for a different
 # architecture, enable this feature to compile OpenSSL as part of the build.
 # See https://docs.rs/openssl/#vendored for more.
@@ -43,7 +42,7 @@ tantivy = { workspace = true }
 anyhow = { workspace = true }
 sysinfo = "0.29.8"
 nvml-wrapper = "0.9.0"
-http-api-bindings = { path = "../http-api-bindings", optional = true }      # included when build with `experimental-http` feature
+http-api-bindings = { path = "../http-api-bindings" }
 async-stream = { workspace = true }
 minijinja = { version = "1.0.8", features = ["loader"] }
 textdistance = "1.0.2"
diff --git a/crates/tabby/src/main.rs b/crates/tabby/src/main.rs
index e62beb54a9a4..50da6517ae3f 100644
--- a/crates/tabby/src/main.rs
+++ b/crates/tabby/src/main.rs
@@ -87,7 +87,6 @@ pub enum Device {
     #[strum(serialize = "vulkan")]
     Vulkan,
 
-    #[cfg(feature = "experimental-http")]
     #[strum(serialize = "experimental_http")]
     #[clap(hide = true)]
     ExperimentalHttp,
diff --git a/crates/tabby/src/serve.rs b/crates/tabby/src/serve.rs
index d3e08d93d210..3cb87c800ae8 100644
--- a/crates/tabby/src/serve.rs
+++ b/crates/tabby/src/serve.rs
@@ -116,13 +116,6 @@ pub struct ServeArgs {
 }
 
 pub async fn main(config: &Config, args: &ServeArgs) {
-    #[cfg(feature = "experimental-http")]
-    if args.device == Device::ExperimentalHttp {
-        tracing::warn!("HTTP device is unstable and does not comply with semver expectations.");
-    } else {
-        load_model(args).await;
-    }
-    #[cfg(not(feature = "experimental-http"))]
     load_model(args).await;
 
     info!("Starting server, this might take a few minutes...");
@@ -175,12 +168,17 @@ pub async fn main(config: &Config, args: &ServeArgs) {
 }
 
 async fn load_model(args: &ServeArgs) {
-    if let Some(model) = &args.model {
-        download_model_if_needed(model).await;
+    if args.device != Device::ExperimentalHttp {
+        if let Some(model) = &args.model {
+            download_model_if_needed(model).await;
+        }
     }
 
-    if let Some(chat_model) = &args.chat_model {
-        download_model_if_needed(chat_model).await
+    let chat_device = args.chat_device.as_ref().unwrap_or(&args.device);
+    if chat_device != &Device::ExperimentalHttp {
+        if let Some(chat_model) = &args.chat_model {
+            download_model_if_needed(chat_model).await
+        }
     }
 }
 
diff --git a/crates/tabby/src/services/model/mod.rs b/crates/tabby/src/services/model/mod.rs
index 88cecc8585eb..f81231fa393b 100644
--- a/crates/tabby/src/services/model/mod.rs
+++ b/crates/tabby/src/services/model/mod.rs
@@ -18,7 +18,6 @@ pub async fn load_chat_completion(
     device: &Device,
     parallelism: u8,
 ) -> Arc<dyn ChatCompletionStream> {
-    #[cfg(feature = "experimental-http")]
     if device == &Device::ExperimentalHttp {
         return http_api_bindings::create_chat(model_id);
     }
@@ -47,7 +46,6 @@ async fn load_completion(
     device: &Device,
     parallelism: u8,
 ) -> (Arc<dyn CompletionStream>, PromptInfo) {
-    #[cfg(feature = "experimental-http")]
     if device == &Device::ExperimentalHttp {
         let (engine, prompt_template, chat_template) = http_api_bindings::create(model_id);
         return (
diff --git a/ee/tabby-schema/src/env.rs b/ee/tabby-schema/src/env.rs
index d442e0421710..5195e8bb5350 100644
--- a/ee/tabby-schema/src/env.rs
+++ b/ee/tabby-schema/src/env.rs
@@ -1,3 +1,3 @@
-pub fn demo_mode() -> bool {
+pub fn is_demo_mode() -> bool {
     std::env::var("TABBY_WEBSERVER_DEMO_MODE").is_ok()
 }
diff --git a/ee/tabby-schema/src/lib.rs b/ee/tabby-schema/src/lib.rs
index 18ff44059be6..4fac7b65ec6b 100644
--- a/ee/tabby-schema/src/lib.rs
+++ b/ee/tabby-schema/src/lib.rs
@@ -6,7 +6,7 @@ mod schema;
 
 pub mod juniper;
 pub use dao::*;
-pub use env::demo_mode;
+pub use env::is_demo_mode;
 pub use schema::*;
 
 #[macro_export]
diff --git a/ee/tabby-schema/src/schema/mod.rs b/ee/tabby-schema/src/schema/mod.rs
index 0e4b8173241a..dc817b62979d 100644
--- a/ee/tabby-schema/src/schema/mod.rs
+++ b/ee/tabby-schema/src/schema/mod.rs
@@ -411,7 +411,7 @@ impl Query {
             is_chat_enabled: ctx.locator.worker().is_chat_enabled().await?,
             is_email_configured: ctx.locator.email().read_setting().await?.is_some(),
             allow_self_signup: ctx.locator.auth().allow_self_signup().await?,
-            is_demo_mode: env::demo_mode(),
+            is_demo_mode: env::is_demo_mode(),
         })
     }
 
diff --git a/ee/tabby-webserver/src/service/auth.rs b/ee/tabby-webserver/src/service/auth.rs
index 7b64f3f14ef4..8b31e09b9d2e 100644
--- a/ee/tabby-webserver/src/service/auth.rs
+++ b/ee/tabby-webserver/src/service/auth.rs
@@ -16,8 +16,8 @@ use tabby_schema::{
         OAuthResponse, RefreshTokenResponse, RegisterResponse, RequestInvitationInput,
         TokenAuthResponse, UpdateOAuthCredentialInput, User,
     },
-    demo_mode,
     email::EmailService,
+    is_demo_mode,
     license::{LicenseInfo, LicenseService},
     setting::SettingService,
     AsID, AsRowid, CoreError, DbEnum, Result,
@@ -63,7 +63,7 @@ impl AuthenticationService for AuthenticationServiceImpl {
         invitation_code: Option<String>,
     ) -> Result<RegisterResponse> {
         let is_admin_initialized = self.is_admin_initialized().await?;
-        if is_admin_initialized && demo_mode() {
+        if is_admin_initialized && is_demo_mode() {
             bail!("Registering new users is disabled in demo mode");
         }
         let invitation =
@@ -166,7 +166,7 @@ impl AuthenticationService for AuthenticationServiceImpl {
         old_password: Option<&str>,
         new_password: &str,
     ) -> Result<()> {
-        if demo_mode() {
+        if is_demo_mode() {
             bail!("Changing passwords is disabled in demo mode");
         }
 
@@ -322,7 +322,7 @@ impl AuthenticationService for AuthenticationServiceImpl {
     }
 
     async fn create_invitation(&self, email: String) -> Result<Invitation> {
-        if demo_mode() {
+        if is_demo_mode() {
             bail!("Inviting users is disabled in demo mode");
         }
         let license = self.license.read().await?;
@@ -523,7 +523,7 @@ async fn get_or_create_oauth_user(
         .map_err(|x| OAuthError::Other(x.into()))?
         .can_register_without_invitation(email)
     {
-        if demo_mode() {
+        if is_demo_mode() {
             bail!("Registering new users is disabled in demo mode");
         }
         // it's ok to set password to null here, because
diff --git a/ee/tabby-webserver/src/service/license.rs b/ee/tabby-webserver/src/service/license.rs
index 885b89f89465..4f3d602bbdc7 100644
--- a/ee/tabby-webserver/src/service/license.rs
+++ b/ee/tabby-webserver/src/service/license.rs
@@ -6,7 +6,7 @@ use lazy_static::lazy_static;
 use serde::Deserialize;
 use tabby_db::DbConn;
 use tabby_schema::{
-    demo_mode,
+    is_demo_mode,
     license::{LicenseInfo, LicenseService, LicenseStatus, LicenseType},
     Result,
 };
@@ -129,7 +129,7 @@ fn license_info_from_raw(raw: LicenseJWTPayload, seats_used: usize) -> Result<Li
 #[async_trait]
 impl LicenseService for LicenseServiceImpl {
     async fn read(&self) -> Result<LicenseInfo> {
-        if demo_mode() {
+        if is_demo_mode() {
             return self.make_demo_license().await;
         }
 
@@ -145,7 +145,7 @@ impl LicenseService for LicenseServiceImpl {
     }
 
     async fn update(&self, license: String) -> Result<()> {
-        if demo_mode() {
+        if is_demo_mode() {
             bail!("Modifying license is disabled in demo mode");
         }
 
diff --git a/ee/tabby-webserver/src/service/mod.rs b/ee/tabby-webserver/src/service/mod.rs
index 7a041c62c93e..b9ac8946e641 100644
--- a/ee/tabby-webserver/src/service/mod.rs
+++ b/ee/tabby-webserver/src/service/mod.rs
@@ -34,8 +34,8 @@ use tabby_db::DbConn;
 use tabby_schema::{
     analytic::AnalyticService,
     auth::AuthenticationService,
-    demo_mode,
     email::EmailService,
+    is_demo_mode,
     job::JobService,
     license::{IsLicenseValid, LicenseService},
     repository::RepositoryService,
@@ -116,13 +116,6 @@ impl ServerContext {
     /// Returns whether a request is authorized to access the content, and the user ID if authentication was used.
     async fn authorize_request(&self, uri: &Uri, headers: &HeaderMap) -> (bool, Option<ID>) {
         let path = uri.path();
-        if demo_mode()
-            && (path.starts_with("/v1/completions")
-                || path.starts_with("/v1/chat/completions")
-                || path.starts_with("/v1beta/chat/completions"))
-        {
-            return (false, None);
-        }
         if !(path.starts_with("/v1/") || path.starts_with("/v1beta/")) {
             return (true, None);
         }
@@ -146,12 +139,10 @@ impl ServerContext {
         }
 
         let is_license_valid = self.license.read().await.ensure_valid_license().is_ok();
+        let requires_owner = !is_license_valid || is_demo_mode();
+
         // If there's no valid license, only allows owner access.
-        match self
-            .db_conn
-            .verify_auth_token(token, !is_license_valid)
-            .await
-        {
+        match self.db_conn.verify_auth_token(token, requires_owner).await {
             Ok(id) => (true, Some(id.as_id())),
             Err(_) => (false, None),
         }
diff --git a/experimental/demo/app.py b/experimental/demo/app.py
index c0d20a9c035f..17a7c195be1d 100644
--- a/experimental/demo/app.py
+++ b/experimental/demo/app.py
@@ -1,5 +1,5 @@
 import os
-from modal import Image, Stub, gpu, asgi_app, Volume
+from modal import Image, Stub, gpu, asgi_app, Volume, Secret
 
 IMAGE_NAME = os.environ.get("TABBY_IMAGE", "tabbyml/tabby")
 
@@ -21,10 +21,12 @@
     container_idle_timeout=600*2,
     timeout=600,
     volumes = {"/data": volume},
-    _allow_background_volume_commits=True
+    _allow_background_volume_commits=True,
+    secrets=[Secret.from_name("deepseek-openapi-key")]
 )
 @asgi_app()
 def entry():
+    import json
     import socket
     import subprocess
     import time
@@ -34,12 +36,24 @@ def entry():
     env = os.environ.copy()
     env["TABBY_DISABLE_USAGE_COLLECTION"] = "1"
     env["TABBY_WEBSERVER_DEMO_MODE"] = "1"
+
+    chat_model = dict(
+        kind="openai-chat",
+        model_name="deepseek-coder",
+        api_endpoint="https://api.deepseek.com/v1",
+        api_key=env.get("OPENAI_API_KEY", ""),
+    )
+
     launcher = subprocess.Popen(
         [
             "/opt/tabby/bin/tabby-cpu",
             "serve",
             "--port",
             "8000",
+            "--chat-device",
+            "experimental-http"
+            "--chat-model",
+            json.dumps(chat_model),
         ],
         env=env
     )