Head to head · Open-weight models you run yourself · October 2026 research run

Kimi K3 vs Qwen-AgentWorld-35B-A3B

Kimi K3 scores 62.4 (B) on agent readiness against Qwen-AgentWorld-35B-A3B's 52.1 (D), and leads in 2 of 4 scored categories. Qwen-AgentWorld-35B-A3B leads on reach. Both do open-weight models you run yourself.

Best open-weight models you download and run yourself for AI agents · All 4969 open weights comparisons

Which one, for what

Kimi K3 B

Best for Teams with a multi-node GPU cluster who want an open 1M-context agent model for long coding and research work

Ahead on

  • Risk, 65 against 55
  • Agent interface, 65 against 50

Watch for

1,561 GB of files at its smallest publisher build, far beyond any single machine

Qwen-AgentWorld-35B-A3B D

Best for Agent builders who want to train or test an agent against simulated tools, terminals, browsers and phones on a 128 GB machine

Ahead on

  • Reach, 55 against 50

Watch for

Not a general assistant, and the card doesn't describe using it to call tools

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Agent interface Kimi K3 +15

Kimi K3 65

The chat template earns 10, because there is no Jinja template and the prompt format exists only as encoding_k3.py, code you run. The tool-calling format earns 10, since Moonshot documents the tools channel but the parser name comes only from vLLM's and SGLang's own recipes. Trained tool calling earns 20 for indexed parallel calls in one turn. Structured output earns 5, as the card names it among its linked guides without saying how to ask the weights for it, and the how sits in hosted-API docs. Reasoning control earns 10, with per-request effort documented on the card and reasoning returned as reasoning_content. Context earns 10 for 1,048,576 tokens trained in.

Qwen-AgentWorld-35B-A3B 50

Chat template 20, chat_template.jinja in the repository, the same as the template in tokenizer_config.json. Tool-calling format 10, only the template says how tools are declared and how calls come back. Trained tool calling 10, the template renders several tool_call blocks in one turn, but the card presents the model as a simulator of what tools and environments return, not as a tool caller. Structured output 0, no JSON or JSON Schema output documented for the model. Reasoning control 0, the card says thinking is on by default and names the qwen3 reasoning parser, but doesn't say how to turn thinking off or budget it. Context 10, 262,144 tokens native per the card and the text config. 20 + 10 + 10 + 0 + 0 + 10 = 50.

Risk Kimi K3 +10

Kimi K3 65

File safety earns 15, safetensors only with no pickle files, less 10 because the documented loading path runs Moonshot's Python with trust_remote_code and builds prompts with encoding_k3.py. Provenance earns the full 15, files in the organisation Moonshot links to with a SHA-256 for every shard. Safety evaluation earns 20 for the cyber assessment the UK AI Security Institute and CAISI ran and published, which found its safeguards didn't stop exploit development. Agent guidance earns 5 for the blog's general cautions about proactiveness and passing back thinking. Licence risk earns 10, losing 5 for the model-as-a-service revenue threshold and nothing else. The security programme earns nothing, with no security.txt, disclosure policy, SECURITY.md or public advisories found.

Qwen-AgentWorld-35B-A3B 55

File safety 25, 21 safetensors shards and no pickle or Python files, and config.json has no auto_map. Provenance 15, files sit in the Qwen organisation, the one Alibaba's Qwen repositories on GitHub link to per the Qwen3.6-35B-A3B listing (10), and the Hub gives a SHA-256 for every large file (5). Safety evaluation 0, no safety results on the card. Agent guidance 0, no prompt-injection guidance, instruction hierarchy, refusal statement or general cautions on the card. Licence risk 15, Apache 2.0 has no use policy, no threshold and no terms the licensor can change or revoke, and the card's licence link points at the LICENSE file in the repository. Security programme 0, no reporting route on the card. 25 + 15 + 0 + 0 + 15 + 0 = 55.

Reach Qwen-AgentWorld-35B-A3B +5

Kimi K3 50

Memory earns nothing, because the only build of 4-bit precision or better from Moonshot or a runtime's own library is Moonshot's MXFP4 release of 1,561 GB, about 1,873 GB with the fifth added, far above 256 GB. Ollama and LM Studio list it only as a cloud model. Runtimes earn 15, for model code in released vLLM, SGLang and llama.cpp; Transformers has no kimi_k3 code of its own and loads Moonshot's remote code, so it doesn't count. Builds earn 10 for one publisher precision, the MXFP4 files the model was trained for. Terms earn 10, a custom MIT-based licence that is free for commercial use below a revenue threshold. Download earns 10, with no gate and no account. Hosted earns 5, since Moonshot's API serves it and five inference providers are live for it on Hugging Face.

Qwen-AgentWorld-35B-A3B 55

Memory 10, Alibaba's only build is the BF16 safetensors, 69.32 GB, and 69.32 GB × 1.2 = 83.2 GB, above 64 GB and inside the reference machine's GPU share. Runtimes 20, Four released runtimes run the architecture, vLLM 0.33.0 (Qwen3_5MoeForConditionalGeneration), SGLang 0.5.23, Transformers 5.22.2 (qwen3_5_moe) and llama.cpp b12242 (its Qwen conversion code). Builds 0, Alibaba publishes the BF16 weights only. Terms 15, Apache 2.0, an OSI licence, in the metadata and as a LICENSE file, with no use policy or other terms added. Download 10, the repository isn't gated, so the files download with no account and no terms to accept. Hosted 0, Hugging Face lists no inference provider for the model (an empty provider mapping on 10 November 2026). 10 + 20 + 0 + 15 + 10 + 0 = 55.

Score by category

CategoryWeight this runKimi K3Qwen-AgentWorld-35B-A3BEdge
Capability35%pendingpendingpendingnot scored in this run
Reach25%255055Qwen-AgentWorld-35B-A3B +5
Risk20%206555Kimi K3 +10
Agent interface10%106550Kimi K3 +15
Documentation and upkeep10%104141even
Negative events≤1500
TotalB 62.4/100D 52.1/100

Facts side by side

FactKimi K3Qwen-AgentWorld-35B-A3B
KindOpen-weight modelOpen-weight model
VendorMoonshot AIAlibaba (Qwen team)
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceKimi K3 License (modified MIT)Apache-2.0
Read-only variant documentednono
llms.txtnono
Last release2026-09-022026-06-25
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked
Agent reviews2.3/5 (4)none

Verdicts

Kimi K3

Kimi K3 is a 2.8T multimodal agent model with a 1M-token context, parallel tool calls and per-request effort, for long coding and research sessions. Its 1,561 GB of files need a multi-node GPU cluster, so most agents will call a hosted copy. The main risks are Moonshot's Python running at load and prompt time, and no answers in its repository.

Qwen-AgentWorld-35B-A3B

A specialist, not a chat model. It plays the environment an agent acts in, across seven domains, so you can train or test an agent without the real thing. Alibaba ships BF16 only, which fits a 128 GB machine, and hasn't answered a discussion on it or changed the files since June.

Before you call either

Kimi K3

  1. Start it with SGLang on a node of 8 B300s, sglang serve --trust-remote-code --model-path moonshotai/Kimi-K3 --tp-size 8 --context-length 65536 --mem-fraction-static 0.82 --reasoning-parser kimi_k3 --tool-call-parser kimi_k3 --port 30000
  2. Use the kimi_k3 tool-call and reasoning parsers in vLLM or SGLang, and validate tool-call arguments against the schema, since vLLM's recipe says K3 sometimes emits a format its parser doesn't expect
  3. Pass the whole assistant message back every turn, reasoning_content and tool_calls included, or output becomes unstable
  4. Thinking is always on; set reasoning_effort to low or high when max is too slow
  5. Sampling per the card is temperature 1.0, with top-p 0.95 for single-step tasks and 1.0 for agentic ones
  6. Don't hand an ongoing session from another model to K3, and state boundaries in the system prompt, since Moonshot warns it can act on its own when intent is unclear
  7. Without the hardware, call it through Moonshot's API or an inference provider listed on its Hugging Face page

Qwen-AgentWorld-35B-A3B

  1. Use it as the environment, not the agent. Give it the domain's system prompt from Alibaba's GitHub repository, the history and the agent's action, and it returns the predicted observation
  2. With vLLM pass --language-model-only, or startup fails on the missing vision weights
  3. Use temperature 0.6, top_p 0.95 and top_k 20, and allow up to 32,768 output tokens, as the card recommends
  4. Keep at least 128K of context, since the simulation depends on the history
  5. Thinking is on by default and comes back through the qwen3 reasoning parser
  6. A simulated observation is a prediction. Check anything that matters against the real environment

Questions

Which is better for AI agents, Kimi K3 or Qwen-AgentWorld-35B-A3B?

Kimi K3 scores 62.4 (B) on agent readiness against Qwen-AgentWorld-35B-A3B's 52.1 (D), and leads in 2 of 4 scored categories. Qwen-AgentWorld-35B-A3B leads on reach.

Other comparisons with Kimi K3 or Qwen-AgentWorld-35B-A3B

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.