mrkeyoor.com_
Sat 07 Nov 05:15 UTC
AI Toolsevaluationupdated 26 Oct 2026

QwenPaw review

QwenPaw is a personal AI assistant for local or cloud deployment. Its README describes shared agent memory, skills, MCP tools, and sessions across the web Console, terminal UI, and messaging channels, with a desktop app also available. Our recorded run covers setup, build, and an incomplete test command at commit a5322bd, not the quality of those assistant workflows.

+291stars / 7d
Verdict

QwenPaw is worth evaluating if you need a self-hosted assistant across several interfaces and will manage its models, storage, and tool permissions. Our September 29, 2026 run at a5322bd completed the install and build steps, but the test output contains failure markers and the command timed out after 900 seconds. That supports a controlled trial, not a claim of verified operational reliability. Start by checking the installed CLI and one model conversation, then validate the channel, permissions, backup, and background-task paths you intend to use.

We ran it

Lab card: what happened when we ran QwenPawScreenshot of QwenPaw (qwenpaw.agentscope.io)
Install✓ · 146s275 packages · 1010 MB
Build✓ · 13s
Tests✗ timed out · 900sran, no count parsed
Known vulns2(pip-audit)
Repo5933 files~1,344,278 lines of source · 117.5 MB · 35 CI workflows · tests dir

Answers from our run

Does QwenPaw build from source?

Dependencies installed in 146 seconds (275 packages), and the build succeeded in 13 seconds. We cloned commit a5322bd into a clean Debian container with 3 CPUs and no project-specific setup.

Do QwenPaw's tests pass?

We could not finish them: the suite was still running after 15 minutes in our container.

Does QwenPaw have known vulnerabilities in its dependencies?

pip-audit flagged 2 known advisories in the dependency tree at the time of our run.

Who should not use QwenPaw?

Teams that need this review to establish a passing full suite: our recorded test run contains failure markers and ended before completion.

What are the alternatives to QwenPaw?

OpenClaw, Khoj. QwenPaw is worth evaluating if you need a self-hosted assistant across several interfaces and will manage its models, storage, and tool permissions.

Setup3/5The September 29, 2026 run at a5322bd completed install in 146 seconds and build in 13 seconds. CLI readiness, model access, and channel workflows were not independently verified.
Docs4/5The supplied README gives concrete pip, script, Docker, desktop, source, model, storage, and telemetry guidance. This rates documented breadth, not successful execution of every route.
Community2/5The supplied issues show user reports and maintainer follow-up, including closure of issue 8064. Adoption, support capacity, and response-time consistency are not established.
Maturity2/5The recorded test output contains failure markers and timed out before a final summary. Desktop beta limitations and unverified operational workflows limit confidence; the evidence does not establish a product-wide failure.

Who it’s for

Developers evaluating a personal assistant across a browser, terminal, and messaging channels.
Self-hosters willing to configure models, persistent storage, tool permissions, and backups.
People exploring skills, plugins, MCP tools, and scheduled tasks who can validate their intended workflows.
Local-model users prepared to check hardware requirements and model behavior themselves.

Who it’s NOT for

Teams that need this review to establish a passing full suite: our recorded test run contains failure markers and ended before completion.
Deployments with a dependency footprint budget below the recorded 1,010 MB. Model storage and runtime memory requirements were not measured.
Managed macOS fleets that require notarized desktop applications: the README says the desktop app is not notarized.
Operators expecting verified unattended background-task reliability: issue 8059 reports missing task records and empty results in a specific desktop setup, and our run did not exercise that workflow.

Setup reality

In our recorded run on September 29, 2026, at commit a5322bdf11f6ab0954a2a9dcfe4f2713bee961ee, the install step completed in 146 seconds and the build step completed in 13 seconds. The record lists 275 dependencies and 1,010 MB of installed dependency storage. These step results do not independently verify an installed CLI, a working model, or a completed conversation.

The test command timed out after 900 seconds with exit 124. Its retained output includes F failure markers around 2% progress and reaches 4% later. There is no final summary or failure traceback, so the failed cases, causes, and exhaustive test counts remain unknown. Pip-audit recorded two advisories affecting one package; the number of packages audited is unknown.

The recorded sandbox configuration was 3 CPUs and 8 GB of RAM, using the image ghcr.io/astral-sh/uv:python3.12-bookworm. The install output explicitly identifies Python 3.11.2 at /work/home/venv; the image label does not establish the interpreter used by every step.

The README requires Python >= 3.11 and < 3.14 for pip installation. Local models can run without API keys; cloud providers require credentials. Source setup requires building and copying the Console frontend before installing the Python package. Docker setup separates working data, secrets, and backups into volumes. The documented qwenpaw init --defaults route automatically accepts telemetry, so use interactive initialization if you want to choose whether to opt in.

Shared context is the reason to evaluate it

QwenPaw's appeal is continuity between interfaces. The README describes the terminal UI as using the same agent, memory, skills, MCP tools, and sessions as the Console and messaging channels. It lists DingTalk, Lark, WeChat, Discord, Telegram, iMessage, and QQ, along with a desktop app for direct access. These are documented capabilities, not workflows verified in our sandbox.

That scope suits someone who wants an assistant to work with files, tools, and scheduled tasks across several places. It also creates configuration work: models need to be selected, channels connected, persistent data backed up, and tool access reviewed. Our evidence does not establish response quality, model speed, or reliable unattended automation.

What our recorded run establishes

Our run began on September 29, 2026, at 03:44:28.306 UTC, using commit a5322bdf11f6ab0954a2a9dcfe4f2713bee961ee. The install step completed in 146 seconds and the build step in 13 seconds. The dependency record lists 275 packages and 1,010 MB of installed storage. This is a dependency measurement, not runtime RAM use or a model-storage requirement.

The test command ran for 900 seconds before the time limit stopped it with exit 124. The retained output contains F failure markers around 2% progress, as well as passing dots, skipped cases, and an X marker. Later output reaches 4%. The run therefore contains evidence of test failures as well as an incomplete suite. It does not provide the final failure report, identify the failed cases, or establish their causes. We cannot derive an exhaustive pass, fail, or skip count from this tail, and 4% is the displayed progress rather than verified coverage.

The sandbox configuration records 3 CPUs, 8 GB of RAM, and the image ghcr.io/astral-sh/uv:python3.12-bookworm. The actual install tail says it used Python 3.11.2 at /work/home/venv. We do not have interpreter output for every later step.

Pip-audit recorded two advisories affecting one package. The record does not identify the advisories or the total number of packages scanned, so coverage and deployment relevance remain unknown. The dependency count is not an audit coverage count.

The checkout scan recorded 5,933 files, 1,344,278 lines of source, 117.5 MB of repository storage, 35 CI workflow files, a tests directory, and a Compose file. It detected no Dockerfile. Those are scan results for this checkout, not proof of a packaging defect, exhaustive test coverage, or maintenance quality.

The supplied record does not include the exact install, build, and test command text or a standalone installed-binary check. A successful step is not enough to establish that the CLI was installed and usable. No model download, inference workload, channel conversation, or agent-quality benchmark was measured.

Setup decisions the quick start leaves to you

The README's pip route installs the package, initializes defaults, and starts the app on port 8088. It requires Python >= 3.11 and < 3.14. Source installation also requires building the Console frontend and copying its output into the package before installing Python dependencies. The script installer is documented as installing uv, a virtual environment, dependencies, Node.js, and frontend assets; the README warns that restricted networks or corporate firewalls may interfere.

Initialization deserves attention. The README says interactive initialization asks whether to opt in to telemetry, while qwenpaw init --defaults accepts it automatically. It describes collection of version, install method, operating system, Python version, CPU architecture, and GPU availability once per version. Local model execution should not be read as a blanket claim that every configuration makes no outbound requests: cloud providers, connected services, and initialization telemetry have separate behavior.

For Docker, the README documents the published agentscope/qwenpaw image and separate volumes for working data, secrets, and backups. It also points image builders to scripts/README.md. Our scan's lack of a detected Dockerfile does not contradict those published-image instructions. When Ollama or LM Studio runs on the host, the container needs a reachable host address because its own localhost refers to the container.

The pinned README at a5322bd lists QwenPaw-Flash 2B, 4B, and 9B models. The supplied current README additionally lists 35B-A3B and 27B and announces v2.2.2 on October 15, 2026. Those later README details are not results from our September run. The README also documents Ollama, LM Studio, and 14+ cloud providers. Local models need no API key; cloud model access does. For Ollama, it specifies a context length of at least 32k. We did not measure hardware requirements or model performance.

Desktop and runtime controls need deployment checks

The README marks the desktop application as beta, lists Windows 10+ and macOS 14+, and warns of incomplete compatibility testing and possible startup, memory, and feature issues. It explicitly says the macOS app is not notarized. Notarization and code signing are different properties; this evidence does not establish whether the app is signed.

The README describes Sandbox, Tool Guard, File Guard, Skill Scanner, and Access Policy. The v2.2.1 release notes also report enforcement of MCP server tool allowlists on the agent runtime path. These are upstream descriptions of controls and changes. Our run did not validate isolation, approval enforcement, or resistance to malicious inputs. Check the relevant permissions before granting access to important files or connecting additional tools.

Issue reports have versions and changing status

Issue 8064 reports a PDF tool-result problem with QwenPaw 2.2.1, agentscope 2.0.7.post1, and DeepSeek in the Console. The reporter describes subsequent HTTP 400 responses after PDF delivery. On October 8, 2026, a maintainer said the problem was fixed on current main, asked the reporter to update to 2.2.2-beta.4, and closed the issue as completed. It is a historical report with an upstream fix statement, not an open defect established across current releases. We did not reproduce or verify the fix.

Issue 8059 remains open in the supplied extract. Its reporter used QwenPaw 2.2.2b4 on Windows 10 with a desktop backend bundle and a manager/worker multi-agent setup. The report describes task IDs returning 404 and finished tasks returning empty final responses. These observations belong to that report, not our sandbox. If background tasks matter to your deployment, test retrieval after completion and backend restart, and confirm that expected output survives.

How to read the scores

The scores are editorial judgments about the evidence available for this evaluation. The scale is 1 for weak support or a substantial documented obstacle, 2 for partial support with major verification gaps, 3 for a workable evaluation path with material caveats, 4 for well-documented breadth with remaining validation needs, and 5 for strong direct evidence across the relevant scope. They are not benchmark results or adoption measurements. Community considers visible contribution and support evidence; maturity considers operational verification and documented limitations. Unknown adoption or compatibility earns no extra credit.

Setup earns 3/5 because the recorded install and build steps completed and several setup routes are documented, while CLI readiness and model workflows remain unverified. Documentation earns 4/5 for concrete installation, storage, model, telemetry, and desktop guidance; linked documentation was not comprehensively tested. Community earns 2/5 because the supplied issues show reports and maintainer follow-up, but do not establish adoption, response-time consistency, or support capacity. Maturity earns 2/5 because the run contains test failure markers without a completed summary, the desktop is beta, and important operational workflows remain unverified. None of these observations alone proves the product is broken.

Choose the workflow before the assistant

OpenClaw's README describes an assistant running on your computer, with a Gateway connecting chats, interfaces, and device capabilities. It supports both personal and shared team deployments. Evaluate it when those connections are your main requirement; the supplied evidence does not establish a performance or reliability advantage over QwenPaw.

Khoj's README describes answers from your documents, semantic search, and custom agents, with self-hosting available. Evaluate it when personal document retrieval is the main job. No comparative retrieval test was supplied.

For QwenPaw, begin with a pinned version and a small trial: verify the installed CLI, configure one model, complete one conversation, and check one intended channel. Then exercise file permissions, backup restoration, and any background-task workflow you plan to depend on. Our recorded install and build results make that evaluation concrete; they do not replace it.

Alternatives

ProjectWhat it isPick it when
OpenClaw gh↗An assistant that runs on your computer, with a Gateway connecting interfaces, messaging channels, and device capabilities.Evaluate it when connecting an assistant to your existing chats and devices is the main requirement. Its README describes both personal and shared team deployments; we did not compare its reliability, footprint, or performance with QwenPaw.
KhojA self-hostable personal AI app with document answers, semantic search, and custom agents.Evaluate it when finding information in your documents is the main job. Its README explicitly describes answers from your documents and semantic search; we did not benchmark retrieval quality.

Sources

  1. QwenPaw README
  2. QwenPaw v2.2.1 release
  3. DeepSeek PDF session issue
  4. Background task result issue

More ai tools reviews

T3MP3ST · annotated_deep_learning_paper_implementations · guizang-ppt-skill · copilot-cli · kornia · skills · the whole board →