Skip to main content
Glama
minmax

qwen-cli-mcp

qwen-cli-mcp

Servidor MCP que delega tareas de código en el Qwen Code CLI instalado localmente.

Envuelve el binario real qwen en lugar de empaquetar su propia copia del agente, de modo que cada llamada hereda tu autenticación de qwen, tus modelos, tus servidores MCP y tu configuración. Aquí no se duplica nada de tu pila de modelos y el servidor no se desfasa cuando actualizas qwen.

Es un hermano de pi-cli-mcp: misma arquitectura, mismos principios, qwen al volante. El documento de diseño de referencia es SPEC.md.

Úsalo cuando tu agente principal (Claude Code, Cursor, própiamente, cualquier cliente MCP) deba delegar trabajo en qwen: una segunda opinión de una familia de modelos diferente, una investigación que quieras mantener fuera de la ventana de contexto principal o trabajo en paralelo.

Instalación

npx -y qwen-cli-mcp         # no install
npm install -g qwen-cli-mcp # or global

Requiere Node ≥ 22 y un qwen funcional en PATH (npm i -g @qwen-code/qwen-code).

Claude Code

claude mcp add-json qwen -s user '{
  "type": "stdio",
  "command": "npx",
  "args": ["-y", "qwen-cli-mcp"],
  "timeout": 3600000
}'
claude mcp list | grep '^qwen:'    # expect: ✔ Connected

El timeout generoso importa: una tarea delegada real puede durar minutos.

Cualquier otro cliente MCP

{
  "mcpServers": {
    "qwen": { "command": "npx", "args": ["-y", "qwen-cli-mcp"] }
  }
}

Mantén el nombre del servidor corto (qwen): pasa a formar parte de los nombres de las herramientas que ve tu modelo.

⚠️ El modo de aprobación predeterminado es yolo. La delegación solo es útil si el delegado puede actuar, por lo que este servidor arranca qwen con aprobación completa de herramientas por defecto — dentro de cwd, como tu usuario. Limítalo con QWEN_MCP_APPROVAL_MODE, con el parámetro approval_mode en cada llamada, o con allowed_tools. Para trabajo de solo análisis, pasa listas permitidas al estilo de allowed_tools: "read,grep,ls".

Related MCP server: consult-mcp

Herramientas

Herramienta

Propósito

qwen

Inicia una sesión. Devuelve [session: <uuid>], el resultado y las estadísticas.

qwen_reply

Continúa una sesión terminada o interrumpida, incluida una que haya cortado un timeout.

qwen_models

Enumera los modelos que qwen puede alcanzar ahora mismo (sondeo en vivo a través del plano de control).

qwen_send

Introduce un turno en ejecución (abort / steer / follow_up; solo transporte stream).

qwen_running

Enumera los turnos en ejecución ahora mismo a los que puede llegar qwen_send.

qwen_sessions

Enumera las sesiones conocidas, de la más reciente a la más antigua, con su directorio de trabajo.

qwen

Argumento

Notas

prompt

Obligatorio. Debe ser autónomo: qwen no puede ver tu conversación.

cwd

Ruta absoluta; por defecto, el directorio de este servidor.

model

Valor de -m. Por defecto usa los ajustes propios de qwen; qwen_models enumera los valores válidos.

approval_mode

plan | default | auto-edit | auto | yolo. Por defecto en el servidor: ver la advertencia anterior.

allowed_tools

Lista de herramientas permitidas separadas por comas, que se pasa como --allowed-tools.

effort

low … max esfuerzo de razonamiento. Solo transporte stream; qwen no tiene una opción CLI.

system_prompt_append

Texto que se añade al prompt del sistema de qwen para esta ejecución.

transport

stream (por defecto) o print. Normalmente se omite.

timeout_ms

Tiempo real para esta ejecución. Si se corta en el plazo, puede reanudarse con qwen_reply.

Lo que devuelve

Solo el resultado final de qwen más estadísticas agregadas; nunca la transcripción, los argumentos de las herramientas ni la salida estándar en crudo:

[session: 0927adc5-a840-4b68-93ca-5ca344c9fafb]

Refactored retry() in src/http.rs; all 12 tests pass.

---
qwen: qwen3-coder-plus · 6 turns · 5 tool calls: bash×2, read×2, edit · 18k in / 310 out · 41s

La respuesta es el objeto result que qwen emite al final de un turno: no hay que adivinar la respuesta. Un objeto de error (error_max_turns, error_during_execution) hace fallar la llamada, pero conserva al final una lo que qwen llegó a decir, así que el trabajo sigue siendo resumible. Un flujo que termine sin ningún objeto result se reporta como roto; nunca se sustituye en silencio por la salida cruda.

Sesiones

qwen devuelve un id de sesión; qwen_reply la reanuda con --resume. La conversación vive en el almacén de sesiones propio de qwen, así que los seguimientos siguen funcionando tras reiniciar este servidor; el mapa de sesión → directorio se persiste en ~/.local/state/qwen-mcp/sessions.json.

Las respuestas concurrentes a una misma sesión se serializan por proceso del servidor: si dos procesos de qwen escriben en el mismo archivo de sesión, lo corromperían. Advertencia entre procesos: si ejecutas dos clientes MCP contra dos procesos del servidor y ambos responden a la misma id de sesión al mismo tiempo, no hay serialización posible. En la práctica, un cliente es el dueño de una sesión; para tener una garantía firme, usa un solo proceso de servidor.

Transportes

stream (por defecto)

print

comando

--input-format stream-json --output-format stream-json

-p --output-format stream-json

proceso

permanece activo y habla de la plana de control por stdin

un proceso por turno, termina al salir

entrega in-run

qwen_send (abort / steer / follow_up)

imposible: qwen no lee nada mientras trabaja

plazo / cancelación

interrupt primero, las señales solo como recurso final

SIGTERM, luego SIGKILL

stream es el valor por defecto porque es un superconjunto: el mismo flujo de mensajes, además de que un turno en curso sigue siendo accesible y uno interrumpido se termina dentro del protocolo, conservando la cola del flujo. Se elige el transporte con transport, o se define el valor por defecto con QWEN_MCP_TRANSPORT=print.

Este servidor nunca envía nada a qwen por su cuenta. No hay una conclusión automática antes de un plazo ni instrucciones inyectadas: qwen_send solo se dispara cuando la persona que llama lo invoca.

Entorno

Variable

Por defecto

Descripción

QWEN_MCP_BIN

qwen

Ruta al binario de qwen.

QWEN_MCP_APPROVAL_MODE

yolo

Modo de aprobación predeterminado para cada llamada. Consulta la advertencia anterior.

QWEN_MCP_MODEL

sin definir

Modelo predeterminado para cada llamada.

QWEN_MCP_TRANSPORT

stream

Transporte predeterminado: stream o print.

QWEN_MCP_TIMEOUT_MS

1800000

Tiempo máximo predeterminado; timeout_ms lo supera en cada llamada.

QWEN_MCP_MAX_TIMEOUT_MS

86400000

Límite máximo de lo que puede pedir timeout_ms.

QWEN_MCP_MAX_CONCURRENT

4

Procesos qwen concurrentes.

QWEN_MCP_MAX_OUTPUT

sin definir

Límite de la salida. Sin definir, no se trunca.

QWEN_MCP_STDERR_LIMIT

1500

Cola de stderr que se incluye en la respuesta.

QWEN_MCP_STDERR_KEEP_EVENTS

sin definir

1 reenvía stderr tal cual, incluidas las líneas de los datos.

QWEN_MCP_MAX_CAPTURE

16000000

Protección del búfer de lectura para evitar un flujo descontrolado.

QWEN_MCP_MAX_LINE

8000000

Longitud máxima de una línea de mensaje de qwen antes de que se descarte.

QWEN_MCP_MAX_FRAME

8000000

Longitud máxima de un único frame JSON-RPC del cliente.

QWEN_MCP_MAX_SESSIONS

200

Sesiones recordadas antes de descartar la más antigua.

QWEN_MCP_KILL_GRACE_MS

5000

Período de gracia entre SIGTERM y SIGKILL.

QWEN_MCP_INTERRUPT_GRACE_MS

5000

Cuánto recibe interrupt antes de las señales (solo stream).

QWEN_MCP_INIT_TIMEOUT_MS

15000

Tiempo máximo para la inicialización (handshake) (solo stream).

QWEN_MCP_MODELS_TIMEOUT_MS

60000

Tiempo total asignado al sondeo de qwen_models.

QWEN_MCP_STATE

~/.local/state/qwen-mcp/sessions.json

Archivo del mapa de sesión → directorio.

QWEN_MCP_WRAP

sin definir

Prefijo de comando, p. ej., un envoltorio de sandbox alrededor de qwen.

Diseño

  • Proceso por llamada. Los propios archivos de sesión de qwen son la fuente de verdad; por eso los seguimientos sobreviven a un reinicio de este servidor.

  • El contrato de comunicación es el propio protocolo stream-json de qwen, hablado directamente: mensajes delimitados por nueva línea en stdout, solicitudes de control y turnos de usuario en stdin. Sus formas se toman de @qwen-code/sdk mediante import type, de modo que un cambio en el código ascendente rompe la compilación en lugar de romper el servidor. Cero dependencias en tiempo de ejecución.

  • Cerrar ante cualquier cosa inesperada de qwen. Un subtipo de resultado desconocido, un handshake fallido, una línea que no se analiza — se reportan como tales, nunca se normalizan en éxito.

  • Ningún proceso sobrevive a su solicitud. Tiempos fuera, cancelación o apagado terminan todo el árbol de procesos de qwen; no queda nada en ningún camino.

Desarrollo

TypeScript (tsc nativo), Biome, Vitest. Los tests prueban el binario real del servidor a través de stdio con un accesorio que habla el protocolo de qwen; las pruebas en vivo contra el qwen instalado son opcionales.

npm run hooks          # once per clone: git hooks from .githooks/
npm run build          # tsc -> dist/
npm test               # unit + type tests, no API access, no tokens
npm run test:live      # 4 live tests against the real qwen binary (spends tokens)
npm run check          # format + types + tests
npm run fix            # biome --write

Licencia

MIT

Available Tools

6 tools
qwenA

Start a NEW task in the local Qwen Code agent — a separate CLI coding agent with its own file/shell tools and its own context window. Blocks until qwen settles, then returns only its final result plus stats, prefixed [session: ]; continue that session later with qwen_reply. Good for: a second opinion from a different model, work kept out of this context, or parallel investigation. Caution: with approval_mode 'yolo' (the server default) qwen edits files and runs shell commands as your user inside cwd without asking. For analysis-only work pass an allowed_tools list or approval_mode 'plan'.

NameRequiredDescriptionDefault
cwdNoUsually omit to use this server's cwd. If set, must be an absolute path (relative is rejected). qwen works and edits here, and reads QWEN.md / context files from here.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesThe complete task. qwen cannot see this conversation, so include everything it needs: file paths, goal, constraints, expected output format.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoSet a comma-separated allowlist of tool names to auto-approve only those, e.g. 'read_file,glob,grep' for a read-only run. Combined with --exclude semantics of the approval mode; pairs well with approval_mode 'yolo'.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With zero annotations, the description carries the full burden and delivers thoroughly: it discloses blocking-until-settle behavior, the output shape (final result plus stats, prefixed [session: <id>]), the separate-context limitation (qwen cannot see this conversation), the yolo approval default that edits files and runs shell commands as the user without asking, kill-time resumability, and stream-vs-print reachability semantics. This is exemplary behavioral disclosure for a mutation-capable tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-organized in descending importance: core purpose first, then return format and session routing, then 'Good for' usage, then the safety caution. Although on the longer side, every sentence conveys distinct information — parameter implications, failure resumability, and approval semantics all earn their place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 9-parameter tool with no annotations and no output schema, the description covers the full operational picture: blocking behavior, output contract with session-id prefix, the self-contained-prompt requirement, safety default, failure mode (resumable on kill), and integration with siblings (qwen_reply, qwen_send). Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds genuine value beyond the schema by contextualizing approval_mode (yolo defaults to full delegation, 'delegation is the point'), allowed_tools (pairs with yolo for read-only runs), transport (steerability via qwen_send), and cwd (where qwen edits and reads QWEN.md). This meaningfully exceeds the baseline by linking parameters to behavioral consequences.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Start a NEW task in the local Qwen Code agent') and explicitly frames it as a separate agent with its own file/shell tools and context window. The 'NEW task' emphasis and 'continue that session later with qwen_reply' directly distinguish it from all siblings (qwen_reply, qwen_send, qwen_models, qwen_running, qwen_sessions) without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit 'Good for' scenarios: a second opinion from a different model, work kept out of this context, and parallel investigation. It implies routing (continue with qwen_reply) and steers safety-constrained usage via the caution. However, it lacks an explicit 'when not to use' or a comparative list against the sibling tools, leaving some selection logic to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_modelsA

List the models this qwen installation can actually reach right now — id, label, capabilities, context window — read live from the CLI over its control protocol. Use it to pick a model value for qwen / qwen_reply. Starts no task.

NameRequiredDescriptionDefault
searchNoOptional substring filter on model id or label, e.g. 'coder', 'max'.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It discloses that the tool reads live from the CLI over a control protocol, that it reflects what is 'actually reachable right now' (i.e., dynamic, not cached), and that it 'starts no task'. It also names the return fields, covering the main behavioral aspects of a listing operation without side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences with zero fluff. The first sentence states the action, scope, and output fields; the second gives the direct use case and a safety note ('Starts no task'). Information is front-loaded and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple listing tool with one optional parameter and no output schema, the description is complete. It explains what the tool returns, when to use it, that it is live, and that it is non-mutating. An agent has everything needed to invoke it correctly — no missing context about return format, side effects, or usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the single optional `search` parameter with a description ('Optional substring filter on model id or label, e.g. 'coder', 'max''), giving 100% schema coverage. The tool description adds no semantic detail beyond that — it simply repeats that it lists models. Per the rule, with full schema coverage the baseline is 3, and no additional value is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'List the models' — a specific verb and resource — and enumerates the exact fields returned (id, label, capabilities, context window). It also differentiates from siblings by specifying it reads live from the CLI and is used to select a `model` value for `qwen` / `qwen_reply`, making its role distinct from conversation and send tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('Use it to pick a `model` value for `qwen` / `qwen_reply`') and notes 'Starts no task', which implies it is a read-only query rather than an action. It does not explicitly name sibling alternatives to avoid, but the purpose is clear enough that an agent would not confuse it with the conversation tools. The condition for selection is stated, though not the exclusion of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_replyA

Send a new turn to an existing qwen session that is not executing right now — including one that timed out or was cancelled: the session survives in qwen's own store, so resume it here instead of restarting with qwen. qwen still has its prior turns (but never this conversation), so the follow-up can be short. Survives restarts of this server. For a turn still running under 'stream', use qwen_send instead.

NameRequiredDescriptionDefault
cwdNoAbsolute path override. Defaults to the directory where the session started.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesFollow-up message for this session.
sessionYesSession id from a [session: <id>] prefix, or from qwen_sessions.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoComma-separated allowlist of tool names to auto-approve for this run.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and delivers richly: it discloses that sessions survive timeouts/cancels in qwen's own store, survive server restarts, and that qwen never sees this conversation (so the follow-up should be short). The parameter texts add further behavioral detail (effort only applies to stream transport and is rejected in print mode; timeout-killed runs still return their session id and are resumable), going well beyond what the schema names alone imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, zero filler, and the core purpose plus scope constraint are front-loaded in the first clause. Every sentence earns its place: purpose/scope, persistence rationale, context-separation note, and sibling routing. Dense but efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 10-parameter, 3-enum tool with no output schema, this is nearly complete. It explains the session lifecycle, resumability guarantees, how to obtain a session id, and routes to the correct sibling for a running turn. All parameters are documented, and the nuance about context separation helps the agent craft an appropriately scoped follow-up.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the property descriptions are already behavior-rich, so the baseline is 3. The main description adds genuine value on top for the two required params: session ('the session survives… resume it here') and prompt ('the follow-up can be short'). That lifts it above baseline, though individual property semantics are largely carried by the schema itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('send a new turn to an existing qwen session') plus a hard scope constraint ('not executing right now', including timed-out or cancelled sessions). It explicitly names sibling alternatives (qwen, qwen_send) and the conditions that select between them, so an agent can distinguish it without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('resume it here instead of restarting with qwen'), when-not-to-use ('For a turn still running under stream, use qwen_send instead'), and names the alternatives directly. Also communicates the follow-up can be short because qwen retains prior turns — practical guidance for how to phrase the prompt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_runningA

List qwen turns executing at this moment — the ones qwen_send can reach — with session id, working directory, elapsed time, and messages already sent in. Only stream-transport runs appear; 'print' runs are unreachable mid-run. For past sessions use qwen_sessions.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the key behavioral constraint that only stream-transport runs are listed and print runs are excluded mid-run. It also lists the output fields, which adds transparency. It doesn't mention potential failure modes or permissions, but for a simple list operation this is adequate; a 4 reflects strong disclosure without being exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences of pure signal. The first sentence states the action and output fields, the second adds a critical scope constraint, and the third names the sibling alternative. There is no fluff or redundancy, and the most important info is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters, no output schema, and low complexity, the description covers everything needed to call the tool correctly: what it returns, the scope (stream-transport only), and the alternative for past runs. No critical information is missing for an agent to invoke it appropriately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the schema covers them 100% (vacuously). Per the rubric, 0 params earns a baseline of 4. The description appropriately adds no parameter-specific detail because there is nothing to add, and it stays consistent with the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and a precise resource ('qwen turns executing at this moment'), and names the exact fields returned (session id, working directory, elapsed time, messages sent). It also differentiates from the sibling qwen_sessions by stating 'For past sessions use qwen_sessions,' making the purpose unambiguous and distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use it (to see currently executing qwen turns that qwen_send can reach) and when not to ('Only stream-transport runs appear; 'print' runs are unreachable mid-run'). It also names the alternative for past sessions (qwen_sessions). This gives clear guidance with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sendA

Deliver a message into a qwen turn that is executing right now. Works only on runs started with transport 'stream' — 'print' runs cannot be reached, and a session that already finished takes qwen_reply, not qwen_send. Returns immediately; qwen's reaction appears in the answer of the qwen/qwen_reply call still waiting on that turn. qwen_running lists reachable sessions. Note: the adapter reports the first result envelope; a follow_up queued behind the current turn is delivered but its answer is not awaited by the original call.

NameRequiredDescriptionDefault
commandNo'abort' (default) interrupts the current turn via qwen's control protocol; 'steer' interrupts and immediately submits the message as a new user turn; 'follow_up' queues the message without interrupting.
messageNoText to deliver. Required for 'steer' and 'follow_up', ignored by 'abort'.
sessionYesSession id of the running turn (see qwen_running).

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the behavioral burden. It states that the call returns immediately and queued follow-ups are not awaited, adding critical nuance about asynchronous behavior. It also explains how results surface via qwen_reply, making the operation's effects clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded: it opens with the core purpose, then states constraints, then behavioral details, and ends with a clarifying note. Every sentence adds information without redundancy or verbosity, achieving high informational density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, no annotations, no output schema), the description covers all necessary aspects: when to use it, when not, how it behaves, and where results appear. It also points to qwen_running for session management, making it self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% description coverage for all parameters, so the baseline is 3. The tool description adds meaningful extra context, such as the note that a follow_up is delivered but its answer is not awaited, which clarifies parameter behavior beyond the schema. This raises the score to 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Deliver a message into a qwen turn that is executing right now.' It distinguishes itself from siblings by specifying the transport restriction ('stream' vs 'print') and when to use qwen_reply instead. The core purpose is unambiguous and unique among the listed tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly delineates when to use this tool versus alternatives: it works only on 'stream' runs, cannot reach 'print' runs, and handles finished sessions via qwen_reply. It also directs agents to qwen_running for session discovery. These are concrete, actionable criteria for tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sessionsA

List all qwen sessions started through this server, newest first, with their working directory — running or finished, including runs that timed out. Use it to recover an id for qwen_reply. For turns still executing (qwen_send targets), use qwen_running.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries the full burden. It discloses that it lists both running and finished runs including timeouts, and orders them newest first. This is a read-only listing operation with no hidden side effects; the description adequately conveys its behavior without needing to mention permissions or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core listing purpose and ordering, followed by usage guidance. No filler words; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, no-output-schema tool, the description covers everything an agent needs: what it lists, the ordering, scoping to this server, inclusion of timeouts, and how to use it for id recovery. It also points to the sibling for a different case. Nothing is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to explain parameter meanings since there are none, and it doesn't attempt to add any.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (List) and resource (qwen sessions), with details: newest first, with working directory, running or finished, including timeouts. It distinguishes from siblings by referencing qwen_reply and qwen_running, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to use it to recover an id for qwen_reply, and tells when NOT to use it: 'For turns still executing (qwen_send targets), use qwen_running.' This gives clear when-to-use and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv0.1.1
    • First observedqwen
    • First observedqwen_models
    • First observedqwen_reply
    • First observedqwen_running
    • First observedqwen_send
    • First observedqwen_sessions

TDQS

A4.6/5.0

Scored across 6 tools

Disambiguation5/5

Each tool has a clearly distinct role: starting a new session, resuming an idle one, messaging a running turn, listing models, listing currently running sessions, and listing historical sessions. The boundaries between qwen_reply and qwen_send (idle vs. executing) and between qwen_running and qwen_sessions (current vs. all) are explicitly explained, leaving no ambiguity for an agent.

Naming Consistency5/5

All tools share the snake_case prefix `qwen_`, with descriptive suffixes (`qwen_reply`, `qwen_models`, `qwen_running`). While the suffixes mix verbs and nouns, the pattern is uniform and predictable, making it easy to infer purpose from the name alone.

Tool Count5/5

With 6 tools, the server is well-scoped for managing a CLI coding agent. Each tool addresses a distinct need (creation, interaction, inspection, enumeration) without redundancy, fitting comfortably within the ideal 3–15 range.

Completeness4/5

The tool surface covers the full lifecycle: start, resume, interrupt (via send), list running, list models, and list historical sessions. A terminate/kill tool for running sessions is absent, but this is a minor gap given that sessions can be resumed after timeout and the descriptions encourage using `qwen_reply` for stalled sessions.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Local MCP server that wraps the headless Claude Code CLI as MCP tools, providing stateless access to Claude's coding capabilities through prompt-based interactions. It enables users to execute Claude Code commands with various prompt formats and structured outputs directly from MCP clients.
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A local MCP server that delegates coding tasks to local Qwen and cloud Gemini models, enabling orchestrators like Claude Code to offload routine code generation and receive verified results with automatic correction logging.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that bridges CLI coding agents like Claude Code, Codex, opencode, and Antigravity into any MCP client, enabling synchronous and asynchronous task execution, follow-up input, and a structured code review tool.
    41 npm
    2
    MIT