Skip to main content
Glama
minmax

qwen-cli-mcp

qwen-cli-mcp

MCP-сервер, который делегирует задачи кодирования вашему локально установленному Qwen Code CLI.

Он оборачивает настоящий бинарник qwen вместо того, чтобы включать собственную копию агента, поэтому каждый вызов наследует вашу аутентификацию qwen, модели, MCP-серверы и настройки. Ничего из вашего стека моделей здесь не дублируется, и сервер не расходится с реальностью, когда вы обновляете qwen.

Родственный проект pi-cli-mcp — та же архитектура, те же принципы, за рулём qwen. Авторитетный дизайн-документ — SPEC.md.

Используйте его, когда ваш основной агент (Claude Code, Cursor, сам pi, любой MCP-клиент) должен передать работу qwen: второе мнение от другого семейства моделей, расследование, которое вы хотите держать вне основного контекстного окна, или параллельная работа.

Установка

npx -y qwen-cli-mcp         # no install
npm install -g qwen-cli-mcp # or global

Требуется Node ≥ 22 и рабочий qwen в PATH (npm i -g @qwen-code/qwen-code).

Claude Code

claude mcp add-json qwen -s user '{
  "type": "stdio",
  "command": "npx",
  "args": ["-y", "qwen-cli-mcp"],
  "timeout": 3600000
}'
claude mcp list | grep '^qwen:'    # expect: ✔ Connected

Щедрый timeout важен: реальная делегированная задача может выполняться минутами.

Любой другой MCP-клиент

{
  "mcpServers": {
    "qwen": { "command": "npx", "args": ["-y", "qwen-cli-mcp"] }
  }
}

Держите имя сервера коротким (qwen): оно становится частью имён инструментов, которые видит ваша модель.

⚠️ Режим одобрения по умолчанию — yolo. Делегирование полезно только тогда, когда делегат может действовать, поэтому этот сервер запускает qwen с полным одобрением инструментов по умолчанию — внутри cwd, от вашего имени. Сузьте его с помощью QWEN_MCP_APPROVAL_MODE, approval_mode на каждый вызов или allowed_tools. Для работы только с анализом передавайте allowlist-ы вида allowed_tools: "read,grep,ls".

Related MCP server: consult-mcp

Инструменты

Инструмент

Назначение

qwen

Запустить сессию. Возвращает [session: <uuid>], результат и статистику.

qwen_reply

Продолжить завершённую или прерванную сессию — включая убитую по таймауту.

qwen_models

Перечислить модели, которые qwen реально может достичь прямо сейчас (живой пробник через control plane).

qwen_send

Доставить сообщение в выполняющийся прямо сейчас ход (abort / steer / follow_up; только stream-транспорт).

qwen_running

Перечислить ходы, выполняющиеся прямо сейчас, до которых может дотянуться qwen_send.

qwen_sessions

Перечислить известные сессии, новые сверху, с их рабочими каталогами.

qwen

Аргумент

Примечания

prompt

Обязателен. Должен быть самодостаточным — qwen не видит вашу беседу.

cwd

Абсолютный путь; по умолчанию — cwd этого сервера.

model

Значение -m. По умолчанию — собственные настройки qwen; qwen_models перечисляет допустимые значения.

approval_mode

plan | default | auto-edit | auto | yolo. Серверный дефолт: см. предупреждение выше.

allowed_tools

Разрешённый список инструментов через запятую, передаётся как --allowed-tools.

effort

low … max — усилие рассуждения. Только stream-транспорт — у qwen нет CLI-флага для этого.

system_prompt_append

Добавляется к системному промпту qwen для этого запуска.

transport

stream (по умолчанию) или print. Обычно опускайте.

timeout_ms

Время выполнения для этого запуска. Запуск, убитый по дедлайну, остаётся возобновляемым через qwen_reply.

Что возвращается

Только финальный результат qwen плюс агрегированная статистика — никогда не транскрипт, аргументы инструментов или сырой stdout:

[session: 0927adc5-a840-4b68-93ca-5ca344c9fafb]

Refactored retry() in src/http.rs; all 12 tests pass.

---
qwen: qwen3-coder-plus · 6 turns · 5 tool calls: bash×2, read×2, edit · 18k in / 310 out · 41s

Ответ — это конверт result, который qwen выдаёт в конце хода — никаких догадок по выбору ответа. Конверт ошибки (error_max_turns, error_during_execution) приводит к провалу вызова, сохраняя всё, что qwen успел сказать, так что работа остаётся возобновляемой. Поток, завершившийся без конверта результата, сообщается как сломанный, никогда не подменяется сырым выводом.

Сессии

qwen возвращает идентификатор сессии; qwen_reply возобновляет её с --resume. Беседа живёт в собственном хранилище сессий qwen, поэтому продолжения работают после перезапуска этого сервера — карта «сессия → каталог» сохраняется в ~/.local/state/qwen-mcp/sessions.json.

Одновременные ответы на одну сессию сериализуются в рамках одного серверного процесса: два процесса qwen, пишущих в один файл сессии, испортили бы его. Предостережение о межпроцессном взаимодействии: если вы запускаете два MCP-клиента против двух серверных процессов и оба отвечают на один и тот же идентификатор сессии одновременно, ничто их не сериализует. На практике сессией владеет один клиент; для жёсткой гарантии держите один серверный процесс.

Транспорты

stream (по умолчанию)

print

команда

--input-format stream-json --output-format stream-json

-p --output-format stream-json

процесс

остаётся живым, говорит на control plane через stdin

один процесс на ход, завершается по окончании

доставка в середине

qwen_send (прерывание / управление / follow_up)

невозможно: qwen ничего не читает во время работы

дедлайн / отмена

сначала собственный interrupt qwen, сигналы только как запасной вариант

SIGTERM, затем SIGKILL

stream — дефолт, потому что он надмножество: тот же поток сообщений, плюс выполняющийся ход остаётся доступным, а прерванный завершается в протоколе, сохраняя хвост потока. Выбирайте на каждый вызов через transport или задайте дефолт через QWEN_MCP_TRANSPORT=print.

Этот сервер никогда ничего не отправляет в qwen по своей инициативе. Ни автоматического завершения перед дедлайном, ни внедрённых инструкций: qwen_send срабатывает только когда вызывающий вызывает его.

Окружение

Переменная

Значение по умолчанию

Смысл

QWEN_MCP_BIN

qwen

Путь к бинарнику qwen.

QWEN_MCP_APPROVAL_MODE

yolo

Режим одобрения по умолчанию для каждого вызова. См. предупреждение выше.

QWEN_MCP_MODEL

не задано

Модель по умолчанию для каждого вызова.

QWEN_MCP_TRANSPORT

stream

Транспорт по умолчанию: stream или print.

QWEN_MCP_TIMEOUT_MS

1800000

Время выполнения по умолчанию; timeout_ms переопределяет его на вызов.

QWEN_MCP_MAX_TIMEOUT_MS

86400000

Потолок того, что может запросить timeout_ms.

QWEN_MCP_MAX_CONCURRENT

4

Одновременные процессы qwen.

QWEN_MCP_MAX_OUTPUT

не задано

Ограничение на ответ. Не задано — значит без усечения.

QWEN_MCP_STDERR_LIMIT

1500

Хвост stderr, включаемый в ответ.

QWEN_MCP_STDERR_KEEP_EVENTS

не задано

1 пересылает stderr дословно, включая строки протокола.

QWEN_MCP_MAX_CAPTURE

16000000

Защита буфера чтения от вышедшего из-под контроля потока.

QWEN_MCP_MAX_LINE

8000000

Самая длинная строка сообщения от qwen, после которой она отбрасывается.

QWEN_MCP_MAX_FRAME

8000000

Самый длинный кадр JSON-RPC от клиента.

QWEN_MCP_MAX_SESSIONS

200

Запомненные сессии, прежде чем самая старая будет отброшена.

QWEN_MCP_KILL_GRACE_MS

5000

Период ожидания SIGTERM → SIGKILL.

QWEN_MCP_INTERRUPT_GRACE_MS

5000

Сколько времени получает interrupt до сигналов (только stream).

QWEN_MCP_INIT_TIMEOUT_MS

15000

Таймаут рукопожатия инициализации (только stream).

QWEN_MCP_MODELS_TIMEOUT_MS

60000

Бюджет на весь запуск пробы qwen_models.

QWEN_MCP_STATE

~/.local/state/qwen-mcp/sessions.json

Карта «сессия → cwd».

QWEN_MCP_WRAP

не задано

Префикс команды, например, обёртка песочницы вокруг qwen.

Дизайн

  • Процесс на вызов. Собственные файлы сессий qwen — источник истины, именно поэтому продолжения переживают перезапуск этого сервера.

  • Контракт на проводе — собственный протокол stream-json qwen, говорим напрямую — сообщения с разделителями строк в stdout, управляющие запросы и пользовательские ходы в stdin. Его формы заимствованы из @qwen-code/sdk через import type, поэтому изменение в апстриме ломает сборку, а не сервер. Ноль зависимостей во время выполнения.

  • Закрытие с ошибкой на всё, что приходит от qwen. Неизвестный подтип результата, неудачное рукопожатие, строка, которая не парсится — сообщается как есть, никогда не нормализуется в успех.

  • Ни один процесс не переживает свой запрос. Таймауты, отмены и завершение работы вычищают всё дерево процессов qwen; ничего не остаётся ни на одном пути.

Разработка

TypeScript (нативный tsc), Biome, Vitest. Тесты гоняют реальный бинарник сервера через stdio против фикстуры, говорящей на протоколе qwen; живые тесты против установленного qwen — опциональны.

npm run hooks          # once per clone: git hooks from .githooks/
npm run build          # tsc -> dist/
npm test               # unit + type tests, no API access, no tokens
npm run test:live      # 4 live tests against the real qwen binary (spends tokens)
npm run check          # format + types + tests
npm run fix            # biome --write

Лицензия

MIT

Available Tools

6 tools
qwenA

Start a NEW task in the local Qwen Code agent — a separate CLI coding agent with its own file/shell tools and its own context window. Blocks until qwen settles, then returns only its final result plus stats, prefixed [session: ]; continue that session later with qwen_reply. Good for: a second opinion from a different model, work kept out of this context, or parallel investigation. Caution: with approval_mode 'yolo' (the server default) qwen edits files and runs shell commands as your user inside cwd without asking. For analysis-only work pass an allowed_tools list or approval_mode 'plan'.

NameRequiredDescriptionDefault
cwdNoUsually omit to use this server's cwd. If set, must be an absolute path (relative is rejected). qwen works and edits here, and reads QWEN.md / context files from here.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesThe complete task. qwen cannot see this conversation, so include everything it needs: file paths, goal, constraints, expected output format.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoSet a comma-separated allowlist of tool names to auto-approve only those, e.g. 'read_file,glob,grep' for a read-only run. Combined with --exclude semantics of the approval mode; pairs well with approval_mode 'yolo'.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With zero annotations, the description carries the full burden and delivers thoroughly: it discloses blocking-until-settle behavior, the output shape (final result plus stats, prefixed [session: <id>]), the separate-context limitation (qwen cannot see this conversation), the yolo approval default that edits files and runs shell commands as the user without asking, kill-time resumability, and stream-vs-print reachability semantics. This is exemplary behavioral disclosure for a mutation-capable tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-organized in descending importance: core purpose first, then return format and session routing, then 'Good for' usage, then the safety caution. Although on the longer side, every sentence conveys distinct information — parameter implications, failure resumability, and approval semantics all earn their place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 9-parameter tool with no annotations and no output schema, the description covers the full operational picture: blocking behavior, output contract with session-id prefix, the self-contained-prompt requirement, safety default, failure mode (resumable on kill), and integration with siblings (qwen_reply, qwen_send). Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds genuine value beyond the schema by contextualizing approval_mode (yolo defaults to full delegation, 'delegation is the point'), allowed_tools (pairs with yolo for read-only runs), transport (steerability via qwen_send), and cwd (where qwen edits and reads QWEN.md). This meaningfully exceeds the baseline by linking parameters to behavioral consequences.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Start a NEW task in the local Qwen Code agent') and explicitly frames it as a separate agent with its own file/shell tools and context window. The 'NEW task' emphasis and 'continue that session later with qwen_reply' directly distinguish it from all siblings (qwen_reply, qwen_send, qwen_models, qwen_running, qwen_sessions) without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit 'Good for' scenarios: a second opinion from a different model, work kept out of this context, and parallel investigation. It implies routing (continue with qwen_reply) and steers safety-constrained usage via the caution. However, it lacks an explicit 'when not to use' or a comparative list against the sibling tools, leaving some selection logic to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_modelsA

List the models this qwen installation can actually reach right now — id, label, capabilities, context window — read live from the CLI over its control protocol. Use it to pick a model value for qwen / qwen_reply. Starts no task.

NameRequiredDescriptionDefault
searchNoOptional substring filter on model id or label, e.g. 'coder', 'max'.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It discloses that the tool reads live from the CLI over a control protocol, that it reflects what is 'actually reachable right now' (i.e., dynamic, not cached), and that it 'starts no task'. It also names the return fields, covering the main behavioral aspects of a listing operation without side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences with zero fluff. The first sentence states the action, scope, and output fields; the second gives the direct use case and a safety note ('Starts no task'). Information is front-loaded and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple listing tool with one optional parameter and no output schema, the description is complete. It explains what the tool returns, when to use it, that it is live, and that it is non-mutating. An agent has everything needed to invoke it correctly — no missing context about return format, side effects, or usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the single optional `search` parameter with a description ('Optional substring filter on model id or label, e.g. 'coder', 'max''), giving 100% schema coverage. The tool description adds no semantic detail beyond that — it simply repeats that it lists models. Per the rule, with full schema coverage the baseline is 3, and no additional value is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'List the models' — a specific verb and resource — and enumerates the exact fields returned (id, label, capabilities, context window). It also differentiates from siblings by specifying it reads live from the CLI and is used to select a `model` value for `qwen` / `qwen_reply`, making its role distinct from conversation and send tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('Use it to pick a `model` value for `qwen` / `qwen_reply`') and notes 'Starts no task', which implies it is a read-only query rather than an action. It does not explicitly name sibling alternatives to avoid, but the purpose is clear enough that an agent would not confuse it with the conversation tools. The condition for selection is stated, though not the exclusion of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_replyA

Send a new turn to an existing qwen session that is not executing right now — including one that timed out or was cancelled: the session survives in qwen's own store, so resume it here instead of restarting with qwen. qwen still has its prior turns (but never this conversation), so the follow-up can be short. Survives restarts of this server. For a turn still running under 'stream', use qwen_send instead.

NameRequiredDescriptionDefault
cwdNoAbsolute path override. Defaults to the directory where the session started.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesFollow-up message for this session.
sessionYesSession id from a [session: <id>] prefix, or from qwen_sessions.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoComma-separated allowlist of tool names to auto-approve for this run.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and delivers richly: it discloses that sessions survive timeouts/cancels in qwen's own store, survive server restarts, and that qwen never sees this conversation (so the follow-up should be short). The parameter texts add further behavioral detail (effort only applies to stream transport and is rejected in print mode; timeout-killed runs still return their session id and are resumable), going well beyond what the schema names alone imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, zero filler, and the core purpose plus scope constraint are front-loaded in the first clause. Every sentence earns its place: purpose/scope, persistence rationale, context-separation note, and sibling routing. Dense but efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 10-parameter, 3-enum tool with no output schema, this is nearly complete. It explains the session lifecycle, resumability guarantees, how to obtain a session id, and routes to the correct sibling for a running turn. All parameters are documented, and the nuance about context separation helps the agent craft an appropriately scoped follow-up.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the property descriptions are already behavior-rich, so the baseline is 3. The main description adds genuine value on top for the two required params: session ('the session survives… resume it here') and prompt ('the follow-up can be short'). That lifts it above baseline, though individual property semantics are largely carried by the schema itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('send a new turn to an existing qwen session') plus a hard scope constraint ('not executing right now', including timed-out or cancelled sessions). It explicitly names sibling alternatives (qwen, qwen_send) and the conditions that select between them, so an agent can distinguish it without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('resume it here instead of restarting with qwen'), when-not-to-use ('For a turn still running under stream, use qwen_send instead'), and names the alternatives directly. Also communicates the follow-up can be short because qwen retains prior turns — practical guidance for how to phrase the prompt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_runningA

List qwen turns executing at this moment — the ones qwen_send can reach — with session id, working directory, elapsed time, and messages already sent in. Only stream-transport runs appear; 'print' runs are unreachable mid-run. For past sessions use qwen_sessions.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the key behavioral constraint that only stream-transport runs are listed and print runs are excluded mid-run. It also lists the output fields, which adds transparency. It doesn't mention potential failure modes or permissions, but for a simple list operation this is adequate; a 4 reflects strong disclosure without being exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences of pure signal. The first sentence states the action and output fields, the second adds a critical scope constraint, and the third names the sibling alternative. There is no fluff or redundancy, and the most important info is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters, no output schema, and low complexity, the description covers everything needed to call the tool correctly: what it returns, the scope (stream-transport only), and the alternative for past runs. No critical information is missing for an agent to invoke it appropriately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the schema covers them 100% (vacuously). Per the rubric, 0 params earns a baseline of 4. The description appropriately adds no parameter-specific detail because there is nothing to add, and it stays consistent with the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and a precise resource ('qwen turns executing at this moment'), and names the exact fields returned (session id, working directory, elapsed time, messages sent). It also differentiates from the sibling qwen_sessions by stating 'For past sessions use qwen_sessions,' making the purpose unambiguous and distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use it (to see currently executing qwen turns that qwen_send can reach) and when not to ('Only stream-transport runs appear; 'print' runs are unreachable mid-run'). It also names the alternative for past sessions (qwen_sessions). This gives clear guidance with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sendA

Deliver a message into a qwen turn that is executing right now. Works only on runs started with transport 'stream' — 'print' runs cannot be reached, and a session that already finished takes qwen_reply, not qwen_send. Returns immediately; qwen's reaction appears in the answer of the qwen/qwen_reply call still waiting on that turn. qwen_running lists reachable sessions. Note: the adapter reports the first result envelope; a follow_up queued behind the current turn is delivered but its answer is not awaited by the original call.

NameRequiredDescriptionDefault
commandNo'abort' (default) interrupts the current turn via qwen's control protocol; 'steer' interrupts and immediately submits the message as a new user turn; 'follow_up' queues the message without interrupting.
messageNoText to deliver. Required for 'steer' and 'follow_up', ignored by 'abort'.
sessionYesSession id of the running turn (see qwen_running).

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the behavioral burden. It states that the call returns immediately and queued follow-ups are not awaited, adding critical nuance about asynchronous behavior. It also explains how results surface via qwen_reply, making the operation's effects clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded: it opens with the core purpose, then states constraints, then behavioral details, and ends with a clarifying note. Every sentence adds information without redundancy or verbosity, achieving high informational density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, no annotations, no output schema), the description covers all necessary aspects: when to use it, when not, how it behaves, and where results appear. It also points to qwen_running for session management, making it self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% description coverage for all parameters, so the baseline is 3. The tool description adds meaningful extra context, such as the note that a follow_up is delivered but its answer is not awaited, which clarifies parameter behavior beyond the schema. This raises the score to 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Deliver a message into a qwen turn that is executing right now.' It distinguishes itself from siblings by specifying the transport restriction ('stream' vs 'print') and when to use qwen_reply instead. The core purpose is unambiguous and unique among the listed tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly delineates when to use this tool versus alternatives: it works only on 'stream' runs, cannot reach 'print' runs, and handles finished sessions via qwen_reply. It also directs agents to qwen_running for session discovery. These are concrete, actionable criteria for tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sessionsA

List all qwen sessions started through this server, newest first, with their working directory — running or finished, including runs that timed out. Use it to recover an id for qwen_reply. For turns still executing (qwen_send targets), use qwen_running.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries the full burden. It discloses that it lists both running and finished runs including timeouts, and orders them newest first. This is a read-only listing operation with no hidden side effects; the description adequately conveys its behavior without needing to mention permissions or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core listing purpose and ordering, followed by usage guidance. No filler words; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, no-output-schema tool, the description covers everything an agent needs: what it lists, the ordering, scoping to this server, inclusion of timeouts, and how to use it for id recovery. It also points to the sibling for a different case. Nothing is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to explain parameter meanings since there are none, and it doesn't attempt to add any.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (List) and resource (qwen sessions), with details: newest first, with working directory, running or finished, including timeouts. It distinguishes from siblings by referencing qwen_reply and qwen_running, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to use it to recover an id for qwen_reply, and tells when NOT to use it: 'For turns still executing (qwen_send targets), use qwen_running.' This gives clear when-to-use and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv0.1.1
    • First observedqwen
    • First observedqwen_models
    • First observedqwen_reply
    • First observedqwen_running
    • First observedqwen_send
    • First observedqwen_sessions

TDQS

A4.6/5.0

Scored across 6 tools

Disambiguation5/5

Each tool has a clearly distinct role: starting a new session, resuming an idle one, messaging a running turn, listing models, listing currently running sessions, and listing historical sessions. The boundaries between qwen_reply and qwen_send (idle vs. executing) and between qwen_running and qwen_sessions (current vs. all) are explicitly explained, leaving no ambiguity for an agent.

Naming Consistency5/5

All tools share the snake_case prefix `qwen_`, with descriptive suffixes (`qwen_reply`, `qwen_models`, `qwen_running`). While the suffixes mix verbs and nouns, the pattern is uniform and predictable, making it easy to infer purpose from the name alone.

Tool Count5/5

With 6 tools, the server is well-scoped for managing a CLI coding agent. Each tool addresses a distinct need (creation, interaction, inspection, enumeration) without redundancy, fitting comfortably within the ideal 3–15 range.

Completeness4/5

The tool surface covers the full lifecycle: start, resume, interrupt (via send), list running, list models, and list historical sessions. A terminate/kill tool for running sessions is absent, but this is a minor gap given that sessions can be resumed after timeout and the descriptions encourage using `qwen_reply` for stalled sessions.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Local MCP server that wraps the headless Claude Code CLI as MCP tools, providing stateless access to Claude's coding capabilities through prompt-based interactions. It enables users to execute Claude Code commands with various prompt formats and structured outputs directly from MCP clients.
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A local MCP server that delegates coding tasks to local Qwen and cloud Gemini models, enabling orchestrators like Claude Code to offload routine code generation and receive verified results with automatic correction logging.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that bridges CLI coding agents like Claude Code, Codex, opencode, and Antigravity into any MCP client, enabling synchronous and asynchronous task execution, follow-up input, and a structured code review tool.
    41 npm
    2
    MIT