Qwen CodeCAUTION
MCP server that enables AI assistants to interact with Qwen code
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/jeffery9/qwen-mcp-tool/releases) [](https://www.npmjs.com/package/qwen-mcp-tool) [](https://www.npmjs.com/package/qwen-mcp-tool) [](https://opensource.org/licenses/MIT) [](https://github.com/jeffery9/qwen-mcp-tool)
📚 View Full Documentation - Search me!, Examples, FAQ, Troubleshooting, Best Practices
This project is a fork of gemini-mcp-tool by jamubc, adapted for Qwen Code.
Repository
The official repository for this project is hosted at: https://github.com/jeffery9/qwen-mcp-tool.git
🌏 Languages
- English
- 中文
Supercharged Programming with Qwen Code
Qwen Code is specifically designed for programming tasks, offering advanced capabilities in code generation, review, refactoring, and explanation. With this MCP tool, you can harness Qwen Code's powerful programming features directly from Claude.
This is a simple Model Context Protocol (MCP) server that allows AI assistants to interact with the Qwen Code. It enables the AI to leverage the power of Qwen's massive token window for large analysis, especially with large files and codebases using the @ syntax for direction.
- Ask Qwen natural questions, through claude or Brainstorm new ideas in a party of 3!
1f4d25d878ecOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add qwen-mcp-tool -- npx -y [email protected]
{
"mcpServers": {
"qwen-mcp-tool": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (13)
13 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Help | read | receive help information |
ask-qwen | read | model selection [-m], sandbox [-s], and changeMode:boolean for providing edits |
brainstorm | read | Generate novel ideas with dynamic context gathering. --> Creative frameworks (SCAMPER, Design Thinking, etc.), domain context integration, idea clustering, feasibility analysis, and iterative refinement. |
explain-code | read | Explains what a piece of code does and how it works |
fetch-chunk | read | Retrieves cached chunks from a changeMode response. Use this to get subsequent chunks after receiving a partial changeMode response. |
generate-code | read | Generates code based on a natural language description of the task |
message | read | Message to test with |
ping | read | Echo |
prompt | read | fetch-chunk cacheKey=<key> chunkIndex=<number> |
refactor-code | read | Refactors code to improve its structure, readability, or performance |
review-code | read | Reviews code for quality, performance, security, and maintainability issues |
test-tool | read | A test tool demonstrating the simplified registration |
timeout-test | read | Test timeout prevention by running for a specified duration |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | WARN |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
tagline: "Leverage Alibaba's Qwen models in any client that supports the standardized MCP protocol—<span style='color: #FFFFFF; background-color: #D97706; padding: 2px 8px; border-radius: 6px; font-si
@modelcontextprotocol/sdk, ai, chalk, d3-shape, inquirer, prismjs, zod, zod-to-json-schema
Gates applied: no_behavioural_pass.
1f4d25d878ecfull audit observations/trust-audit/mcp-server/jeffery9__qwen-code.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 1f4d25d878ec | CAUTION | B | 89 | first audit |
Questions
What is the Qwen Code MCP server?
MCP server that enables AI assistants to interact with Qwen code
What tools does Qwen Code expose?
13 in total: 13 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Qwen Code safe to connect to an agent?
With care. The audit graded it B (89/100) and found 2 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Qwen Code need?
No credential environment variables were found in its source, so it appears to need none.
How does Qwen Code run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as qwen-mcp-tool at 0.0.1.
How current is this page?
The grade is for one exact copy of the source (1f4d25d878ec), read on 2026-10-08. The repository is watched and re-audited when it changes.