Skip to main content
Glama
minmax

qwen-cli-mcp

qwen-cli-mcp

로컬에 설치된 Qwen Code CLI에 코딩 작업을 위임하는 MCP 서버입니다.

자체 에이전트 복사본을 번들링하는 대신 실제 qwen 바이너리를 감싸므로, 모든 호출이 여러분의 qwen 인증, 모델, MCP 서버, 설정을 상속받습니다. 모델 스택에 대한 어떤 것도 여기서 중복되지 않으며, qwen을 업그레이드해도 서버는 표류하지 않습니다.

pi-cli-mcp의 형제 프로젝트 — 동일한 아키텍처, 동일한 원칙, 운전석에는 qwen이 있습니다. 권위 있는 설계 문서는 SPEC.md입니다.

주 에이전트(Claude Code, Cursor, pi 자체, 모든 MCP 클라이언트)가 작업을 qwen에 넘겨야 할 때 사용하세요: 다른 모델 계열의 두 번째 의견, 메인 컨텍스트 창 밖에 두고 싶은 조사, 또는 병렬 작업.

설치

npx -y qwen-cli-mcp         # no install
npm install -g qwen-cli-mcp # or global

Node ≥ 22와 PATH에 동작하는 qwen이 필요합니다 (npm i -g @qwen-code/qwen-code).

Claude Code

claude mcp add-json qwen -s user '{
  "type": "stdio",
  "command": "npx",
  "args": ["-y", "qwen-cli-mcp"],
  "timeout": 3600000
}'
claude mcp list | grep '^qwen:'    # expect: ✔ Connected

넉넉한 timeout이 중요합니다: 실제 위임 작업은 몇 분 동안 실행될 수 있습니다.

다른 모든 MCP 클라이언트

{
  "mcpServers": {
    "qwen": { "command": "npx", "args": ["-y", "qwen-cli-mcp"] }
  }
}

서버 이름을 짧게 유지하세요(qwen): 모델이 보게 될 도구 이름의 일부가 됩니다.

⚠️ 기본 승인 모드는 yolo입니다. 위임은 대리인이 행동할 수 있을 때만 유용하므로, 이 서버는 기본적으로 전체 도구 승인으로 qwen을 시작합니다 — cwd 안에서, 여러분의 사용자로. QWEN_MCP_APPROVAL_MODE, 호출별 approval_mode, 또는 allowed_tools로 좁힐 수 있습니다. 분석 전용 작업에는 allowed_tools: "read,grep,ls" 스타일의 허용 목록을 전달하세요.

Related MCP server: consult-mcp

도구

도구

용도

qwen

세션을 시작합니다. [session: <uuid>], 결과, 통계를 반환합니다.

qwen_reply

완료 또는 중단된 세션을 계속합니다 — 타임아웃으로 종료된 세션도 포함합니다.

qwen_models

qwen이 지금 실제로 도달할 수 있는 모델을 나열합니다(제어 평면을 통한 실시간 프로브).

qwen_send

현재 실행 중인 턴으로 전달합니다(abort / steer / follow_up; 스트림 전송만).

qwen_running

qwen_send가 도달할 수 있는 현재 실행 중인 턴을 나열합니다.

qwen_sessions

알려진 세션을 최신순으로 작업 디렉터리와 함께 나열합니다.

qwen

인자

참고

prompt

필수. 자족적이어야 합니다 — qwen은 여러분의 대화를 볼 수 없습니다.

cwd

절대 경로; 기본값은 이 서버의 cwd입니다.

model

-m 값. 기본값은 qwen 자체 설정을 따릅니다; qwen_models에 유효한 값이 나열됩니다.

approval_mode

plan | default | auto-edit | auto | yolo. 서버 기본값: 위 경고를 참조하세요.

allowed_tools

--allowed-tools로 전달되는 쉼표로 구분된 도구 허용 목록.

effort

low … max 추론 노력. 스트림 전송 전용 — qwen에는 이에 대한 CLI 플래그가 없습니다.

system_prompt_append

이 실행에 대해 qwen의 시스템 프롬프트에 추가됩니다.

transport

stream(기본값) 또는 print. 보통은 생략합니다.

timeout_ms

이 실행의 벽시계 시간. 마감 시한에 종료된 실행은 qwen_reply로 재개 가능한 상태로 유지됩니다.

반환되는 것

qwen의 최종 결과와 총계 통계만 반환됩니다 — 대화 기록, 도구 인자, 원시 stdout은 절대 반환되지 않습니다:

[session: 0927adc5-a840-4b68-93ca-5ca344c9fafb]

Refactored retry() in src/http.rs; all 12 tests pass.

---
qwen: qwen3-coder-plus · 6 turns · 5 tool calls: bash×2, read×2, edit · 18k in / 310 out · 41s

답변은 qwen이 턴 끝에 내보내는 result 봉투입니다 — 답변 선택 추측이 없습니다. 오류 봉투(error_max_turns, error_during_execution)는 qwen이 말한 모든 것을 유지하면서 호출을 실패시키므로 작업은 재개 가능한 상태로 유지됩니다. 결과 봉투 없이 끝나는 스트림은 손상된 것으로 보고되며, 절대 원시 출력으로 조용히 대체되지 않습니다.

세션

qwen은 세션 ID를 반환하고, qwen_reply는 --resume으로 이를 재개합니다. 대화는 qwen 자체 세션 저장소에 있으므로, 후속 작업은 이 서버를 재시작해도 계속 동작합니다 — 세션 → 디렉터리 매핑은 ~/.local/state/qwen-mcp/sessions.json에 영속화됩니다.

한 세션에 대한 동시 응답은 서버 프로세스별로 직렬화됩니다: 하나의 세션 파일에 쓰는 두 개의 qwen 프로세스는 그 파일을 손상시킬 수 있습니다. 프로세스 간 주의사항: 두 MCP 클라이언트를 두 서버 프로세스에 연결하고 둘 다 동시에 동일한 세션 ID에 응답하면, 이를 직렬화하는 것이 없습니다. 실제로는 한 클라이언트가 세션을 소유합니다. 확실한 보장을 원하면 서버 프로세스를 하나로 유지하세요.

전송

stream(기본값)

print

명령

--input-format stream-json --output-format stream-json

-p --output-format stream-json

프로세스

유지되며 stdin에서 제어 평면을 말함

턴당 하나의 프로세스, 완료되면 종료

실행 중 전달

qwen_send (중단 / 조향 / 후속)

불가능: qwen은 작업 중 아무것도 읽지 않음

마감 / 취소

먼저 qwen 자체 interrupt, 신호는 폴백으로만

SIGTERM, 그 다음 SIGKILL

stream이 기본값인 이유는 상위 집합이기 때문입니다: 동일한 메시지 스트림에 더해 실행 중인 턴이 계속 도달 가능하고 중단된 턴이 프로토콜 내에서 종료되어 스트림의 꼬리를 유지합니다. transport로 호출별로 선택하거나 QWEN_MCP_TRANSPORT=print로 기본값을 설정하세요.

이 서버는 스스로 qwen에 아무것도 보내지 않습니다. 마감 전 자동 마무리, 주입된 지시 없음: qwen_send는 호출자가 호출할 때만 발화합니다.

환경

변수

기본값

의미

QWEN_MCP_BIN

qwen

qwen 바이너리 경로.

QWEN_MCP_APPROVAL_MODE

yolo

모든 호출의 기본 승인 모드. 위 경고를 참조하세요.

QWEN_MCP_MODEL

설정 안 됨

모든 호출의 기본 모델.

QWEN_MCP_TRANSPORT

stream

기본 전송: stream 또는 print.

QWEN_MCP_TIMEOUT_MS

1800000

기본 벽시계 시간; timeout_ms가 호출별로 덮어씁니다.

QWEN_MCP_MAX_TIMEOUT_MS

86400000

timeout_ms가 요청할 수 있는 상한.

QWEN_MCP_MAX_CONCURRENT

4

동시 qwen 프로세스.

QWEN_MCP_MAX_OUTPUT

설정 안 됨

답변 상한. 설정하지 않으면 잘림이 없음을 의미합니다.

QWEN_MCP_STDERR_LIMIT

1500

응답에 포함되는 stderr 꼬리.

QWEN_MCP_STDERR_KEEP_EVENTS

설정 안 됨

1은 프로토콜 줄을 포함해 stderr를 그대로 전달합니다.

QWEN_MCP_MAX_CAPTURE

16000000

폭주 스트림에 대한 읽기 버퍼 보호.

QWEN_MCP_MAX_LINE

8000000

qwen에서 오는 가장 긴 단일 메시지 줄, 초과 시 폐기.

QWEN_MCP_MAX_FRAME

8000000

클라이언트에서 오는 가장 긴 단일 JSON-RPC 프레임.

QWEN_MCP_MAX_SESSIONS

200

가장 오래된 세션이 폐기되기 전까지 기억되는 세션 수.

QWEN_MCP_KILL_GRACE_MS

5000

SIGTERM → SIGKILL 유예 기간.

QWEN_MCP_INTERRUPT_GRACE_MS

5000

신호 전에 interrupt가 받는 시간 (스트림 전용).

QWEN_MCP_INIT_TIMEOUT_MS

15000

초기화 핸드셰이크 타임아웃 (스트림 전용).

QWEN_MCP_MODELS_TIMEOUT_MS

60000

qwen_models 프로브의 전체 실행 예산.

QWEN_MCP_STATE

~/.local/state/qwen-mcp/sessions.json

세션 → cwd 매핑.

QWEN_MCP_WRAP

설정 안 됨

명령 접두사, 예: qwen 주위의 샌드박스 래퍼.

설계

  • 호출당 프로세스. Qwen 자체 세션 파일이 진실의 원천이며, 이것이 후속 작업이 이 서버의 재시작을 견디게 만드는 이유입니다.

  • 유선 계약은 qwen 자체의 stream-json 프로토콜이며, 직접 말합니다 — stdout의 개행으로 구분된 메시지, stdin의 제어 요청과 사용자 턴. 그 형태는 @qwen-code/sdk에서 import type으로 차용하므로, 상류 변경은 서버가 아닌 빌드를 깨뜨립니다. 런타임 의존성 제로.

  • qwen에서 오는 모든 것에 대해 실패 폐쇄. 알 수 없는 결과 하위 유형, 실패한 핸드셰이크, 파싱되지 않는 줄 — 모두 그렇게 보고되며 절대 성공으로 정규화되지 않습니다.

  • 어떤 프로세스도 요청을 넘어 살아남지 않습니다. 타임아웃, 취소, 종료는 전체 qwen 프로세스 트리를 수확합니다; 어떤 경로에서도 아무것도 남지 않습니다.

개발

TypeScript(네이티브 tsc), Biome, Vitest. 테스트는 qwen의 프로토콜을 말하는 픽스처에 대해 stdio를 통해 실제 서버 바이너리를 구동합니다; 설치된 qwen에 대한 라이브 테스트는 선택 사항입니다.

npm run hooks          # once per clone: git hooks from .githooks/
npm run build          # tsc -> dist/
npm test               # unit + type tests, no API access, no tokens
npm run test:live      # 4 live tests against the real qwen binary (spends tokens)
npm run check          # format + types + tests
npm run fix            # biome --write

라이선스

MIT

Available Tools

6 tools
qwenA

Start a NEW task in the local Qwen Code agent — a separate CLI coding agent with its own file/shell tools and its own context window. Blocks until qwen settles, then returns only its final result plus stats, prefixed [session: ]; continue that session later with qwen_reply. Good for: a second opinion from a different model, work kept out of this context, or parallel investigation. Caution: with approval_mode 'yolo' (the server default) qwen edits files and runs shell commands as your user inside cwd without asking. For analysis-only work pass an allowed_tools list or approval_mode 'plan'.

NameRequiredDescriptionDefault
cwdNoUsually omit to use this server's cwd. If set, must be an absolute path (relative is rejected). qwen works and edits here, and reads QWEN.md / context files from here.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesThe complete task. qwen cannot see this conversation, so include everything it needs: file paths, goal, constraints, expected output format.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoSet a comma-separated allowlist of tool names to auto-approve only those, e.g. 'read_file,glob,grep' for a read-only run. Combined with --exclude semantics of the approval mode; pairs well with approval_mode 'yolo'.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With zero annotations, the description carries the full burden and delivers thoroughly: it discloses blocking-until-settle behavior, the output shape (final result plus stats, prefixed [session: <id>]), the separate-context limitation (qwen cannot see this conversation), the yolo approval default that edits files and runs shell commands as the user without asking, kill-time resumability, and stream-vs-print reachability semantics. This is exemplary behavioral disclosure for a mutation-capable tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-organized in descending importance: core purpose first, then return format and session routing, then 'Good for' usage, then the safety caution. Although on the longer side, every sentence conveys distinct information — parameter implications, failure resumability, and approval semantics all earn their place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 9-parameter tool with no annotations and no output schema, the description covers the full operational picture: blocking behavior, output contract with session-id prefix, the self-contained-prompt requirement, safety default, failure mode (resumable on kill), and integration with siblings (qwen_reply, qwen_send). Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds genuine value beyond the schema by contextualizing approval_mode (yolo defaults to full delegation, 'delegation is the point'), allowed_tools (pairs with yolo for read-only runs), transport (steerability via qwen_send), and cwd (where qwen edits and reads QWEN.md). This meaningfully exceeds the baseline by linking parameters to behavioral consequences.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Start a NEW task in the local Qwen Code agent') and explicitly frames it as a separate agent with its own file/shell tools and context window. The 'NEW task' emphasis and 'continue that session later with qwen_reply' directly distinguish it from all siblings (qwen_reply, qwen_send, qwen_models, qwen_running, qwen_sessions) without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit 'Good for' scenarios: a second opinion from a different model, work kept out of this context, and parallel investigation. It implies routing (continue with qwen_reply) and steers safety-constrained usage via the caution. However, it lacks an explicit 'when not to use' or a comparative list against the sibling tools, leaving some selection logic to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_modelsA

List the models this qwen installation can actually reach right now — id, label, capabilities, context window — read live from the CLI over its control protocol. Use it to pick a model value for qwen / qwen_reply. Starts no task.

NameRequiredDescriptionDefault
searchNoOptional substring filter on model id or label, e.g. 'coder', 'max'.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It discloses that the tool reads live from the CLI over a control protocol, that it reflects what is 'actually reachable right now' (i.e., dynamic, not cached), and that it 'starts no task'. It also names the return fields, covering the main behavioral aspects of a listing operation without side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences with zero fluff. The first sentence states the action, scope, and output fields; the second gives the direct use case and a safety note ('Starts no task'). Information is front-loaded and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple listing tool with one optional parameter and no output schema, the description is complete. It explains what the tool returns, when to use it, that it is live, and that it is non-mutating. An agent has everything needed to invoke it correctly — no missing context about return format, side effects, or usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the single optional `search` parameter with a description ('Optional substring filter on model id or label, e.g. 'coder', 'max''), giving 100% schema coverage. The tool description adds no semantic detail beyond that — it simply repeats that it lists models. Per the rule, with full schema coverage the baseline is 3, and no additional value is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'List the models' — a specific verb and resource — and enumerates the exact fields returned (id, label, capabilities, context window). It also differentiates from siblings by specifying it reads live from the CLI and is used to select a `model` value for `qwen` / `qwen_reply`, making its role distinct from conversation and send tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('Use it to pick a `model` value for `qwen` / `qwen_reply`') and notes 'Starts no task', which implies it is a read-only query rather than an action. It does not explicitly name sibling alternatives to avoid, but the purpose is clear enough that an agent would not confuse it with the conversation tools. The condition for selection is stated, though not the exclusion of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_replyA

Send a new turn to an existing qwen session that is not executing right now — including one that timed out or was cancelled: the session survives in qwen's own store, so resume it here instead of restarting with qwen. qwen still has its prior turns (but never this conversation), so the follow-up can be short. Survives restarts of this server. For a turn still running under 'stream', use qwen_send instead.

NameRequiredDescriptionDefault
cwdNoAbsolute path override. Defaults to the directory where the session started.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesFollow-up message for this session.
sessionYesSession id from a [session: <id>] prefix, or from qwen_sessions.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoComma-separated allowlist of tool names to auto-approve for this run.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and delivers richly: it discloses that sessions survive timeouts/cancels in qwen's own store, survive server restarts, and that qwen never sees this conversation (so the follow-up should be short). The parameter texts add further behavioral detail (effort only applies to stream transport and is rejected in print mode; timeout-killed runs still return their session id and are resumable), going well beyond what the schema names alone imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, zero filler, and the core purpose plus scope constraint are front-loaded in the first clause. Every sentence earns its place: purpose/scope, persistence rationale, context-separation note, and sibling routing. Dense but efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 10-parameter, 3-enum tool with no output schema, this is nearly complete. It explains the session lifecycle, resumability guarantees, how to obtain a session id, and routes to the correct sibling for a running turn. All parameters are documented, and the nuance about context separation helps the agent craft an appropriately scoped follow-up.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the property descriptions are already behavior-rich, so the baseline is 3. The main description adds genuine value on top for the two required params: session ('the session survives… resume it here') and prompt ('the follow-up can be short'). That lifts it above baseline, though individual property semantics are largely carried by the schema itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('send a new turn to an existing qwen session') plus a hard scope constraint ('not executing right now', including timed-out or cancelled sessions). It explicitly names sibling alternatives (qwen, qwen_send) and the conditions that select between them, so an agent can distinguish it without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('resume it here instead of restarting with qwen'), when-not-to-use ('For a turn still running under stream, use qwen_send instead'), and names the alternatives directly. Also communicates the follow-up can be short because qwen retains prior turns — practical guidance for how to phrase the prompt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_runningA

List qwen turns executing at this moment — the ones qwen_send can reach — with session id, working directory, elapsed time, and messages already sent in. Only stream-transport runs appear; 'print' runs are unreachable mid-run. For past sessions use qwen_sessions.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the key behavioral constraint that only stream-transport runs are listed and print runs are excluded mid-run. It also lists the output fields, which adds transparency. It doesn't mention potential failure modes or permissions, but for a simple list operation this is adequate; a 4 reflects strong disclosure without being exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences of pure signal. The first sentence states the action and output fields, the second adds a critical scope constraint, and the third names the sibling alternative. There is no fluff or redundancy, and the most important info is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters, no output schema, and low complexity, the description covers everything needed to call the tool correctly: what it returns, the scope (stream-transport only), and the alternative for past runs. No critical information is missing for an agent to invoke it appropriately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the schema covers them 100% (vacuously). Per the rubric, 0 params earns a baseline of 4. The description appropriately adds no parameter-specific detail because there is nothing to add, and it stays consistent with the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and a precise resource ('qwen turns executing at this moment'), and names the exact fields returned (session id, working directory, elapsed time, messages sent). It also differentiates from the sibling qwen_sessions by stating 'For past sessions use qwen_sessions,' making the purpose unambiguous and distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use it (to see currently executing qwen turns that qwen_send can reach) and when not to ('Only stream-transport runs appear; 'print' runs are unreachable mid-run'). It also names the alternative for past sessions (qwen_sessions). This gives clear guidance with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sendA

Deliver a message into a qwen turn that is executing right now. Works only on runs started with transport 'stream' — 'print' runs cannot be reached, and a session that already finished takes qwen_reply, not qwen_send. Returns immediately; qwen's reaction appears in the answer of the qwen/qwen_reply call still waiting on that turn. qwen_running lists reachable sessions. Note: the adapter reports the first result envelope; a follow_up queued behind the current turn is delivered but its answer is not awaited by the original call.

NameRequiredDescriptionDefault
commandNo'abort' (default) interrupts the current turn via qwen's control protocol; 'steer' interrupts and immediately submits the message as a new user turn; 'follow_up' queues the message without interrupting.
messageNoText to deliver. Required for 'steer' and 'follow_up', ignored by 'abort'.
sessionYesSession id of the running turn (see qwen_running).

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the behavioral burden. It states that the call returns immediately and queued follow-ups are not awaited, adding critical nuance about asynchronous behavior. It also explains how results surface via qwen_reply, making the operation's effects clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded: it opens with the core purpose, then states constraints, then behavioral details, and ends with a clarifying note. Every sentence adds information without redundancy or verbosity, achieving high informational density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, no annotations, no output schema), the description covers all necessary aspects: when to use it, when not, how it behaves, and where results appear. It also points to qwen_running for session management, making it self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% description coverage for all parameters, so the baseline is 3. The tool description adds meaningful extra context, such as the note that a follow_up is delivered but its answer is not awaited, which clarifies parameter behavior beyond the schema. This raises the score to 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Deliver a message into a qwen turn that is executing right now.' It distinguishes itself from siblings by specifying the transport restriction ('stream' vs 'print') and when to use qwen_reply instead. The core purpose is unambiguous and unique among the listed tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly delineates when to use this tool versus alternatives: it works only on 'stream' runs, cannot reach 'print' runs, and handles finished sessions via qwen_reply. It also directs agents to qwen_running for session discovery. These are concrete, actionable criteria for tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sessionsA

List all qwen sessions started through this server, newest first, with their working directory — running or finished, including runs that timed out. Use it to recover an id for qwen_reply. For turns still executing (qwen_send targets), use qwen_running.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries the full burden. It discloses that it lists both running and finished runs including timeouts, and orders them newest first. This is a read-only listing operation with no hidden side effects; the description adequately conveys its behavior without needing to mention permissions or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core listing purpose and ordering, followed by usage guidance. No filler words; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, no-output-schema tool, the description covers everything an agent needs: what it lists, the ordering, scoping to this server, inclusion of timeouts, and how to use it for id recovery. It also points to the sibling for a different case. Nothing is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to explain parameter meanings since there are none, and it doesn't attempt to add any.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (List) and resource (qwen sessions), with details: newest first, with working directory, running or finished, including timeouts. It distinguishes from siblings by referencing qwen_reply and qwen_running, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to use it to recover an id for qwen_reply, and tells when NOT to use it: 'For turns still executing (qwen_send targets), use qwen_running.' This gives clear when-to-use and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv0.1.1
    • First observedqwen
    • First observedqwen_models
    • First observedqwen_reply
    • First observedqwen_running
    • First observedqwen_send
    • First observedqwen_sessions

TDQS

A4.6/5.0

Scored across 6 tools

Disambiguation5/5

Each tool has a clearly distinct role: starting a new session, resuming an idle one, messaging a running turn, listing models, listing currently running sessions, and listing historical sessions. The boundaries between qwen_reply and qwen_send (idle vs. executing) and between qwen_running and qwen_sessions (current vs. all) are explicitly explained, leaving no ambiguity for an agent.

Naming Consistency5/5

All tools share the snake_case prefix `qwen_`, with descriptive suffixes (`qwen_reply`, `qwen_models`, `qwen_running`). While the suffixes mix verbs and nouns, the pattern is uniform and predictable, making it easy to infer purpose from the name alone.

Tool Count5/5

With 6 tools, the server is well-scoped for managing a CLI coding agent. Each tool addresses a distinct need (creation, interaction, inspection, enumeration) without redundancy, fitting comfortably within the ideal 3–15 range.

Completeness4/5

The tool surface covers the full lifecycle: start, resume, interrupt (via send), list running, list models, and list historical sessions. A terminate/kill tool for running sessions is absent, but this is a minor gap given that sessions can be resumed after timeout and the descriptions encourage using `qwen_reply` for stalled sessions.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Local MCP server that wraps the headless Claude Code CLI as MCP tools, providing stateless access to Claude's coding capabilities through prompt-based interactions. It enables users to execute Claude Code commands with various prompt formats and structured outputs directly from MCP clients.
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A local MCP server that delegates coding tasks to local Qwen and cloud Gemini models, enabling orchestrators like Claude Code to offload routine code generation and receive verified results with automatic correction logging.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that bridges CLI coding agents like Claude Code, Codex, opencode, and Antigravity into any MCP client, enabling synchronous and asynchronous task execution, follow-up input, and a structured code review tool.
    41 npm
    2
    MIT