Chipotlai Max: AI Coding Agent Using Chipotle's Support Bot
Chipotlai Max is an AI coding agent that provides free inference by reverse-engineering Chipotle's customer support chatbot, Pepper AI. The project is a meme fork of OpenCode, designed to utilize the compute resources of a corporate support bot to perform coding tasks such as writing Python and solving LeetCode problems.
Technical Architecture
Chipotlai Max operates by routing requests through a local proxy that mimics the communication protocol of Chipotle's support bot.
The Proxy Layer
Based on work by developer @Gonzih, the project uses an OpenAI-compatible proxy that reverse-engineers the Amelia WebSocket/SockJS + STOMP backend used by Pepper AI. This proxy exposes a local endpoint at http://localhost:3000/v1, allowing the agent to interact with the LLM without requiring any API keys.
Integration with OpenCode
The project is a fork of OpenCode (an MIT-licensed project with over 120k stars). The developers have hardcoded the chipotle-pepper provider and the pepper-1 model into the agent's configuration, effectively turning a customer support tool into a coding assistant.
Deployment and Configuration
To run Chipotlai Max, users must clone the repository with submodules and install dependencies via Bun. The system requires two components to be running simultaneously: the chipotle-llm-provider proxy and the Chipotlai Max CLI.
Default Configuration Settings:
| Setting | Value |
|---|---|
| Provider | chipotle-pepper |
| Model | pepper-1 |
| Base URL | http://localhost:3000/v1 |
| API Key | burrito-2026 (any value accepted) |
| Cost | $0.00 |
Legal and Operational Risks
The developers explicitly state that the project is for educational and meme purposes and warn against using it for production codebases. Several risks are associated with the project:
Terms of Service Violation: The project reverse-engineers a production support bot, which is likely a violation of Chipotle's TOS.
Compute Hijacking: Community members on Hacker News discussed the potential for this to fall under the Computer Fraud and Abuse Act (CFAA) in the US, as it commandeers remote machine resources for unintended purposes.
Fragility: The proxy is subject to immediate failure if Chipotle patches the backend. Indeed, reports from the community indicate that the Chipotle "Ask Pepper" chatbot has been disabled or patched in response to these exploits.
Rate Limiting: The system is limited by anonymous session pools (MAX_POOL_SIZE=5).
Community Insights and Counterpoints
Users on Hacker News provided several perspectives on the ethics and legality of the legality of the project:
"I'd be worried about treading into CFAA territory... this commandeers remote machine resources to do your compute in ways clearly not intended by the provider."
Other users noted that similar exploits have occurred with other corporate bots, such as Amazon's Rufus (now Alexa for shopping), which was previously used to write code before being patched. Some suggested that the project could be created as a "token foraging" agent that automatically switches between various free support bots and leaked keys to maintain free inference.
Future Expansion
The project maintainers are seeking contributors to reverse-engineer other corporate chatbots from retailers like Home Depot, Lowe's, Target, Starbucks, and Walmart to create a new ecosystem of free AI providers.