Skip to main content
Glama
minmax

qwen-cli-mcp

qwen-cli-mcp

用于将你的编码任务委派给本机安装的 Qwen Code CLI 的 MCP 服务器。

它包装了真正的 qwen 二进制文件,而不是自行捆绑 agent 副本,因此每次调用都会继承你的 qwen 认证、模型、MCP 服务器和设置。这里不会重复你的模型栈的任何部分;升级 qwen 时,服务器也不会漂移。

它是 pi-cli-mcp 的姊妹项目——相同的架构、相同的原则,由 qwen 掌控方向盘。权威设计文档是 SPEC.md。

当你的主智能体(Claude Code、Cursor、pi 本身或任何 MCP 客户端)需要把工作交给 qwen 时使用它:来自不同模型家族的第二意见、你希望保留在主上下文之外调查,或并行工作。

安装

npx -y qwen-cli-mcp         # no install
npm install -g qwen-cli-mcp # or global

需要 Node ≥ 22,并且 PATH 上有可用的 qwen(npm i -g @qwen-code/qwen-code)。

Claude Code

claude mcp add-json qwen -s user '{
  "type": "stdio",
  "command": "npx",
  "args": ["-y", "qwen-cli-mcp"],
  "timeout": 3600000
}'
claude mcp list | grep '^qwen:'    # expect: ✔ Connected

宽裕的 timeout 很重要:一个真实的委派任务可能运行好几分钟。

任何其他 MCP 客户端

{
  "mcpServers": {
    "qwen": { "command": "npx", "args": ["-y", "qwen-cli-mcp"] }
  }
}

保持服务器名简短(qwen):它会成为模型看到的工具名的一部分。

⚠️ 默认批准模式是 yolo。 只有当被委派方可以行动时,委派才有意义,因此该服务器默认以完全工具批准模式启动 qwen——在你自己的用户身份下,并在 cwd 内。可通过 QWEN_MCP_APPROVAL_MODE、每次调用的 approval_mode 或 allowed_tools 来收紧范围。对于纯分析工作,请传入 allowed_tools: "read,grep,ls" 风格的允许列表。

Related MCP server: consult-mcp

工具

工具

用途

qwen

开始一个会话。返回 [session: <uuid>]、结果和统计信息。

qwen_reply

继续一个已完成或已中断的会话——包括因超时被终止的会话。

qwen_models

列出 qwen 当前实际可以访问到的模型(通过控制平面实时探测)。

qwen_send

向当前正在执行的一个轮次投递(abort / steer / follow_up;仅 stream 传输)。

qwen_running

列出当前正在执行、且 qwen_send 能够到达的轮次。

qwen_sessions

列出已知会话,最新的优先,并包含各自的工作目录。

qwen

参数

说明

prompt

必需。必须自包含——qwen 看不到你的对话上下文。

cwd

绝对路径;默认为该服务器的 cwd。

model

-m 的值。默认为 qwen 自身的设置;qwen_models 会列出有效值。

approval_mode

plan | default | auto-edit | auto | yolo。服务器默认值:参见上面的警告。

allowed_tools

逗号分隔的工具允许列表,会作为 --allowed-tools 传入。

effort

low … max 推理强度。仅 stream 传输——qwen 没有对应的 CLI 标签。

system_prompt_append

附加到本轮 qwen 系统提示内容的后面。

transport

stream(默认)或 print。通常省略。

timeout_ms

本次运行的墙钟时间。到达期限被杀掉的运行仍可继续通过 qwen_reply 恢复。

返回什么

只返回 qwen 的最终结果和聚合统计——绝不返回 transcript、工具调用或原始 stdout:

[session: 0927adc5-a840-4b68-93ca-5ca344c9fafb]

Refactored retry() in src/http.rs; all 12 tests pass.

---
qwen: qwen3-coder-plus · 6 turns · 5 tool calls: bash×2, read×2, edit · 18k in / 310 out · 41s

答案来自 qwen 在一轮结束时发出的 result 信封——不会有选择答案的困惑。错误信封(error_max_turns、error_during_execution)会让调用失败,同时完整保留 qwen 能说到的一切,因此工作仍然可以恢复。如果一个流在没有 result 信封时结束,则会被报告为损坏的,绝不会被静默替换成原始输出。

会话

qwen 返回会话 ID,qwen_reply 用 --resume 恢复它。会话内容存在于 qwen 自己的会话存储中,所以该服务器重启后后续请求仍然有效——会话 → 目录映射持久化在 ~/.local/state/qwen-mcp/sessions.json。

同一会话的并发回复会通过服务器进程内的串行化处理:两个 qwen 进程同时工作同一个会话文件会导致文件损坏。跨进程注意: 如果你用两个 MCP 客户端连接两个服务器进程,并且两者同时回复 同一个 会话 ID,则不会有任何串行化机制。通常一个进程会自己一个客户端;如果需要严格保证,请只保留一个服务器进程。

传输方式

stream(默认)

print

命令

--input-format stream-json --output-format stream-json

-p --output-format stream-json

进程

保持运行,在 stdin 上使用控制平面语言

每个轮次一个进程,结束后退出

运行中接收消息

qwen_send(interrupt / steer / follow_up)

不可能:qwen 在工作中不读任何消息

期限 / 取消

先拦截后 respawn;先用 qwen 自己的 interrupt,然后信号 fallback

SIGTERM,然后 SIGKILL

stream 是默认选项,因为它是一个超集:同一消息递增,轮次运行中仍可继续,中断的轮次会在协议内结束,而不会丢弃流尾。每次调用可用 transport 选择,或用 QWEN_MCP_TRANSPORT=print 设置默认值。

该服务器永远不会自行向 qwen 发送任何内容。 没有计划好的收尾,没有注入的指令:只有当调用方发起时,才会触发 qwen_send。

环境变量

变量

默认值

含义

QWEN_MCP_BIN

qwen

qwen 可执行文件的路径。

QWEN_MCP_APPROVAL_MODE

yolo

每次调用的默认 approval_mode。参见上面的警告。

QWEN_MCP_MODEL

未设置

每次调用的默认模型。

QWEN_MCP_TRANSPORT

stream

默认传输方式:stream 或 print。

QWEN_MCP_TIMEOUT_MS

1800000

默认墙钟时间;每次调用可被 timeout_ms 覆盖。

QWEN_MCP_MAX_TIMEOUT_MS

86400000

timeout_ms 可请求的最大值上限。

QWEN_MCP_MAX_CONCURRENT

4

并发 qwen 进程数。

QWEN_MCP_MAX_OUTPUT

未设置

答案的上限。未设置表示不截断。

QWEN_MCP_STDERR_LIMIT

1500

响应中追加的 stderr 尾部。

QWEN_MCP_STDERR_KEEP_EVENTS

未设置

为 1 时,原样转发 stderr,并包含协议行。

QWEN_MCP_MAX_CAPTURE

16000000

读取缓冲保护,用于避免流失控。

QWEN_MCP_MAX_LINE

8000000

qwen 的单条消息行超过该长度将被丢弃。

QWEN_MCP_MAX_FRAME

8000000

来自客户端的单个 JSON-RPC 帧的最大长度。

QWEN_MCP_MAX_SESSIONS

200

记住的会话数,超过时丢弃最旧的。

QWEN_MCP_KILL_GRACE_MS

5000

SIGTERM → SIGKILL 的宽限期。

QWEN_MCP_INTERRUPT_GRACE_MS

5000

在信号之前,interrupt 等待的时间(仅 stream)。

QWEN_MCP_INIT_TIMEOUT_MS

15000

初始化握手超时(仅 stream)。

QWEN_MCP_MODELS_TIMEOUT_MS

60000

qwen_models 探测的整体运行预算。

QWEN_MCP_STATE

~/.local/state/qwen-mcp/sessions.json

会话 → cwd 映射。

QWEN_MCP_WRAP

未设置

命令前缀,例如 qwen 的 configurable wrapper(沙箱包裹)。

设计

  • 每次调用一个进程。 qwen 自身的会话文件是唯一的真实来源,这使得后续请求在本服务器重启后仍可继续工作。

  • 线上协议是 qwen 自身的 stream-json 协议,直接在语言-neutral 的输出/输入流上通信,ccl-defined messages, control requests and user turns on stdin。其类型通过 @qwen-code/sdk 的 import type 继承,因此上游变更会触发编译失败而不是运行时损坏。零运行时依赖。

  • 对来自 qwen 的任何失败(fail-closed)。 未知的结果类型、失败握手、无法解析的内容行为,都会如实报告,而不会伪装成成功。

  • 任何进程都不会存活超过其请求。 超时、取消和服务正常关闭都会回收整个 qwen 进程树;任何情况下都不会留下残留。

开发

TypeScript(使用原生 tsc),Biome,Vitest。测试通过 stdio 驱动真实服务器的二进制,并在一个会说 qwen 协议的 configurable fixture 上运行;针对已安装 qwen 的 live tests 是可选的。

npm run hooks          # once per clone: git hooks from .githooks/
npm run build          # tsc -> dist/
npm test               # unit + type tests, no API access, no tokens
npm run test:live      # 4 live tests against the real qwen binary (spends tokens)
npm run check          # format + types + tests
npm run fix            # biome --write

许可证

MIT

Available Tools

6 tools
qwenA

Start a NEW task in the local Qwen Code agent — a separate CLI coding agent with its own file/shell tools and its own context window. Blocks until qwen settles, then returns only its final result plus stats, prefixed [session: ]; continue that session later with qwen_reply. Good for: a second opinion from a different model, work kept out of this context, or parallel investigation. Caution: with approval_mode 'yolo' (the server default) qwen edits files and runs shell commands as your user inside cwd without asking. For analysis-only work pass an allowed_tools list or approval_mode 'plan'.

NameRequiredDescriptionDefault
cwdNoUsually omit to use this server's cwd. If set, must be an absolute path (relative is rejected). qwen works and edits here, and reads QWEN.md / context files from here.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesThe complete task. qwen cannot see this conversation, so include everything it needs: file paths, goal, constraints, expected output format.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoSet a comma-separated allowlist of tool names to auto-approve only those, e.g. 'read_file,glob,grep' for a read-only run. Combined with --exclude semantics of the approval mode; pairs well with approval_mode 'yolo'.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With zero annotations, the description carries the full burden and delivers thoroughly: it discloses blocking-until-settle behavior, the output shape (final result plus stats, prefixed [session: <id>]), the separate-context limitation (qwen cannot see this conversation), the yolo approval default that edits files and runs shell commands as the user without asking, kill-time resumability, and stream-vs-print reachability semantics. This is exemplary behavioral disclosure for a mutation-capable tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-organized in descending importance: core purpose first, then return format and session routing, then 'Good for' usage, then the safety caution. Although on the longer side, every sentence conveys distinct information — parameter implications, failure resumability, and approval semantics all earn their place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 9-parameter tool with no annotations and no output schema, the description covers the full operational picture: blocking behavior, output contract with session-id prefix, the self-contained-prompt requirement, safety default, failure mode (resumable on kill), and integration with siblings (qwen_reply, qwen_send). Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds genuine value beyond the schema by contextualizing approval_mode (yolo defaults to full delegation, 'delegation is the point'), allowed_tools (pairs with yolo for read-only runs), transport (steerability via qwen_send), and cwd (where qwen edits and reads QWEN.md). This meaningfully exceeds the baseline by linking parameters to behavioral consequences.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Start a NEW task in the local Qwen Code agent') and explicitly frames it as a separate agent with its own file/shell tools and context window. The 'NEW task' emphasis and 'continue that session later with qwen_reply' directly distinguish it from all siblings (qwen_reply, qwen_send, qwen_models, qwen_running, qwen_sessions) without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit 'Good for' scenarios: a second opinion from a different model, work kept out of this context, and parallel investigation. It implies routing (continue with qwen_reply) and steers safety-constrained usage via the caution. However, it lacks an explicit 'when not to use' or a comparative list against the sibling tools, leaving some selection logic to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_modelsA

List the models this qwen installation can actually reach right now — id, label, capabilities, context window — read live from the CLI over its control protocol. Use it to pick a model value for qwen / qwen_reply. Starts no task.

NameRequiredDescriptionDefault
searchNoOptional substring filter on model id or label, e.g. 'coder', 'max'.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It discloses that the tool reads live from the CLI over a control protocol, that it reflects what is 'actually reachable right now' (i.e., dynamic, not cached), and that it 'starts no task'. It also names the return fields, covering the main behavioral aspects of a listing operation without side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences with zero fluff. The first sentence states the action, scope, and output fields; the second gives the direct use case and a safety note ('Starts no task'). Information is front-loaded and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple listing tool with one optional parameter and no output schema, the description is complete. It explains what the tool returns, when to use it, that it is live, and that it is non-mutating. An agent has everything needed to invoke it correctly — no missing context about return format, side effects, or usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the single optional `search` parameter with a description ('Optional substring filter on model id or label, e.g. 'coder', 'max''), giving 100% schema coverage. The tool description adds no semantic detail beyond that — it simply repeats that it lists models. Per the rule, with full schema coverage the baseline is 3, and no additional value is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'List the models' — a specific verb and resource — and enumerates the exact fields returned (id, label, capabilities, context window). It also differentiates from siblings by specifying it reads live from the CLI and is used to select a `model` value for `qwen` / `qwen_reply`, making its role distinct from conversation and send tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('Use it to pick a `model` value for `qwen` / `qwen_reply`') and notes 'Starts no task', which implies it is a read-only query rather than an action. It does not explicitly name sibling alternatives to avoid, but the purpose is clear enough that an agent would not confuse it with the conversation tools. The condition for selection is stated, though not the exclusion of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_replyA

Send a new turn to an existing qwen session that is not executing right now — including one that timed out or was cancelled: the session survives in qwen's own store, so resume it here instead of restarting with qwen. qwen still has its prior turns (but never this conversation), so the follow-up can be short. Survives restarts of this server. For a turn still running under 'stream', use qwen_send instead.

NameRequiredDescriptionDefault
cwdNoAbsolute path override. Defaults to the directory where the session started.
modelNoModel id, optionally plan-qualified: 'qwen3-coder-plus' or 'qwen3.7-plus@coding' / '@token'. Qualify when the id exists in more than one provider plan (qwen_models marks those) — a bare ambiguous id is rejected. Defaults to qwen's own settings.
effortNoReasoning effort tier. Only transport 'stream' can apply it (no CLI flag exists); print mode rejects the call rather than silently ignoring it.
promptYesFollow-up message for this session.
sessionYesSession id from a [session: <id>] prefix, or from qwen_sessions.
transportNoUsually omit. The default 'stream' keeps qwen up, so a running turn can be steered or aborted with qwen_send. 'print' runs one process per turn that cannot be reached while it works.
timeout_msNoUsually omit — the server default is generous. Override only when the task's real size demands it. A run killed at the deadline is not lost: it still returns its session id and is resumable with qwen_reply.
allowed_toolsNoComma-separated allowlist of tool names to auto-approve for this run.
approval_modeNoHow qwen approves tool use: 'plan' (plan only), 'default' (prompt — unusable headless, tools get denied), 'auto-edit' (auto-approve edits), 'auto' (classifier-approved safe actions), 'yolo' (approve everything). Defaults to the server's QWEN_MCP_APPROVAL_MODE (itself defaulting to yolo): delegation is the point of this server. Restrict instead with allowed_tools when it matters.
system_prompt_appendNoExtra text appended to qwen's system prompt for this run.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and delivers richly: it discloses that sessions survive timeouts/cancels in qwen's own store, survive server restarts, and that qwen never sees this conversation (so the follow-up should be short). The parameter texts add further behavioral detail (effort only applies to stream transport and is rejected in print mode; timeout-killed runs still return their session id and are resumable), going well beyond what the schema names alone imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, zero filler, and the core purpose plus scope constraint are front-loaded in the first clause. Every sentence earns its place: purpose/scope, persistence rationale, context-separation note, and sibling routing. Dense but efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 10-parameter, 3-enum tool with no output schema, this is nearly complete. It explains the session lifecycle, resumability guarantees, how to obtain a session id, and routes to the correct sibling for a running turn. All parameters are documented, and the nuance about context separation helps the agent craft an appropriately scoped follow-up.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the property descriptions are already behavior-rich, so the baseline is 3. The main description adds genuine value on top for the two required params: session ('the session survives… resume it here') and prompt ('the follow-up can be short'). That lifts it above baseline, though individual property semantics are largely carried by the schema itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('send a new turn to an existing qwen session') plus a hard scope constraint ('not executing right now', including timed-out or cancelled sessions). It explicitly names sibling alternatives (qwen, qwen_send) and the conditions that select between them, so an agent can distinguish it without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('resume it here instead of restarting with qwen'), when-not-to-use ('For a turn still running under stream, use qwen_send instead'), and names the alternatives directly. Also communicates the follow-up can be short because qwen retains prior turns — practical guidance for how to phrase the prompt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_runningA

List qwen turns executing at this moment — the ones qwen_send can reach — with session id, working directory, elapsed time, and messages already sent in. Only stream-transport runs appear; 'print' runs are unreachable mid-run. For past sessions use qwen_sessions.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the key behavioral constraint that only stream-transport runs are listed and print runs are excluded mid-run. It also lists the output fields, which adds transparency. It doesn't mention potential failure modes or permissions, but for a simple list operation this is adequate; a 4 reflects strong disclosure without being exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences of pure signal. The first sentence states the action and output fields, the second adds a critical scope constraint, and the third names the sibling alternative. There is no fluff or redundancy, and the most important info is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters, no output schema, and low complexity, the description covers everything needed to call the tool correctly: what it returns, the scope (stream-transport only), and the alternative for past runs. No critical information is missing for an agent to invoke it appropriately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the schema covers them 100% (vacuously). Per the rubric, 0 params earns a baseline of 4. The description appropriately adds no parameter-specific detail because there is nothing to add, and it stays consistent with the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and a precise resource ('qwen turns executing at this moment'), and names the exact fields returned (session id, working directory, elapsed time, messages sent). It also differentiates from the sibling qwen_sessions by stating 'For past sessions use qwen_sessions,' making the purpose unambiguous and distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use it (to see currently executing qwen turns that qwen_send can reach) and when not to ('Only stream-transport runs appear; 'print' runs are unreachable mid-run'). It also names the alternative for past sessions (qwen_sessions). This gives clear guidance with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sendA

Deliver a message into a qwen turn that is executing right now. Works only on runs started with transport 'stream' — 'print' runs cannot be reached, and a session that already finished takes qwen_reply, not qwen_send. Returns immediately; qwen's reaction appears in the answer of the qwen/qwen_reply call still waiting on that turn. qwen_running lists reachable sessions. Note: the adapter reports the first result envelope; a follow_up queued behind the current turn is delivered but its answer is not awaited by the original call.

NameRequiredDescriptionDefault
commandNo'abort' (default) interrupts the current turn via qwen's control protocol; 'steer' interrupts and immediately submits the message as a new user turn; 'follow_up' queues the message without interrupting.
messageNoText to deliver. Required for 'steer' and 'follow_up', ignored by 'abort'.
sessionYesSession id of the running turn (see qwen_running).

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the behavioral burden. It states that the call returns immediately and queued follow-ups are not awaited, adding critical nuance about asynchronous behavior. It also explains how results surface via qwen_reply, making the operation's effects clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded: it opens with the core purpose, then states constraints, then behavioral details, and ends with a clarifying note. Every sentence adds information without redundancy or verbosity, achieving high informational density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, no annotations, no output schema), the description covers all necessary aspects: when to use it, when not, how it behaves, and where results appear. It also points to qwen_running for session management, making it self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% description coverage for all parameters, so the baseline is 3. The tool description adds meaningful extra context, such as the note that a follow_up is delivered but its answer is not awaited, which clarifies parameter behavior beyond the schema. This raises the score to 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Deliver a message into a qwen turn that is executing right now.' It distinguishes itself from siblings by specifying the transport restriction ('stream' vs 'print') and when to use qwen_reply instead. The core purpose is unambiguous and unique among the listed tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly delineates when to use this tool versus alternatives: it works only on 'stream' runs, cannot reach 'print' runs, and handles finished sessions via qwen_reply. It also directs agents to qwen_running for session discovery. These are concrete, actionable criteria for tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

qwen_sessionsA

List all qwen sessions started through this server, newest first, with their working directory — running or finished, including runs that timed out. Use it to recover an id for qwen_reply. For turns still executing (qwen_send targets), use qwen_running.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries the full burden. It discloses that it lists both running and finished runs including timeouts, and orders them newest first. This is a read-only listing operation with no hidden side effects; the description adequately conveys its behavior without needing to mention permissions or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core listing purpose and ordering, followed by usage guidance. No filler words; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, no-output-schema tool, the description covers everything an agent needs: what it lists, the ordering, scoping to this server, inclusion of timeouts, and how to use it for id recovery. It also points to the sibling for a different case. Nothing is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to explain parameter meanings since there are none, and it doesn't attempt to add any.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (List) and resource (qwen sessions), with details: newest first, with working directory, running or finished, including timeouts. It distinguishes from siblings by referencing qwen_reply and qwen_running, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to use it to recover an id for qwen_reply, and tells when NOT to use it: 'For turns still executing (qwen_send targets), use qwen_running.' This gives clear when-to-use and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv0.1.1
    • First observedqwen
    • First observedqwen_models
    • First observedqwen_reply
    • First observedqwen_running
    • First observedqwen_send
    • First observedqwen_sessions

TDQS

A4.6/5.0

Scored across 6 tools

Disambiguation5/5

Each tool has a clearly distinct role: starting a new session, resuming an idle one, messaging a running turn, listing models, listing currently running sessions, and listing historical sessions. The boundaries between qwen_reply and qwen_send (idle vs. executing) and between qwen_running and qwen_sessions (current vs. all) are explicitly explained, leaving no ambiguity for an agent.

Naming Consistency5/5

All tools share the snake_case prefix `qwen_`, with descriptive suffixes (`qwen_reply`, `qwen_models`, `qwen_running`). While the suffixes mix verbs and nouns, the pattern is uniform and predictable, making it easy to infer purpose from the name alone.

Tool Count5/5

With 6 tools, the server is well-scoped for managing a CLI coding agent. Each tool addresses a distinct need (creation, interaction, inspection, enumeration) without redundancy, fitting comfortably within the ideal 3–15 range.

Completeness4/5

The tool surface covers the full lifecycle: start, resume, interrupt (via send), list running, list models, and list historical sessions. A terminate/kill tool for running sessions is absent, but this is a minor gap given that sessions can be resumed after timeout and the descriptions encourage using `qwen_reply` for stalled sessions.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Local MCP server that wraps the headless Claude Code CLI as MCP tools, providing stateless access to Claude's coding capabilities through prompt-based interactions. It enables users to execute Claude Code commands with various prompt formats and structured outputs directly from MCP clients.
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A local MCP server that delegates coding tasks to local Qwen and cloud Gemini models, enabling orchestrators like Claude Code to offload routine code generation and receive verified results with automatic correction logging.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that bridges CLI coding agents like Claude Code, Codex, opencode, and Antigravity into any MCP client, enabling synchronous and asynchronous task execution, follow-up input, and a structured code review tool.
    41 npm
    2
    MIT