Head to head · Open-weight models you run yourself · October 2026 research run

LongCat-2.5 vs Qwen3.5-9B

Qwen3.5-9B scores 60.5 (C) on agent readiness against LongCat-2.5's 50.5 (D), and leads in 1 of 4 scored categories. LongCat-2.5 leads on risk, agent interface and documentation and upkeep. Both do open-weight models you run yourself.

Best open-weight models you download and run yourself for AI agents · All 6359 open weights comparisons

Which one, for what

LongCat-2.5 D

Best for Operators with NPU clusters, and anyone tracking what the open flagships can do

Ahead on

  • Risk, 60 against 55
  • Agent interface, 75 against 70
  • Documentation and upkeep, 46 against 34

Watch for

3,562 GB in BF16 and 1,336 GB at 4 bits

Qwen3.5-9B C

Best for Agents that want a small multimodal tool-calling model on a laptop or a 16 GB GPU, under a plain licence

Ahead on

  • Reach, 85 against 35

Watch for

No quantised build from Qwen itself

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Reach Qwen3.5-9B +50

LongCat-2.5 35

Memory 0, the smallest build is Meituan's W4A4 repository, 1,336 GB, and 1,336 GB × 1.2 = 1,603 GB, far above 256 GB. The BF16 files are 3,562 GB. Runtimes 0, none of the six runs it in a released version: vLLM 0.33.0, SGLang 0.5.23, Transformers 5.22.2 and llama.cpp b12242 have no LongcatCausalLM or pro_v code, and the model code config.json names isn't in the repository. Builds 10, one quantised build from Meituan, the W4A4 repository (4-bit experts, 1,336 GB). Terms 15, MIT in the metadata, the LICENSE file and the card, with nothing added. Download 10, the Hub API reports gated false for both repositories on 10 November 2026, so the files download with no account and nothing to accept. Hosted 0, Hugging Face maps no inference provider to it. 0 + 0 + 10 + 15 + 10 + 0 = 35.

Qwen3.5-9B 85

Memory 30, Qwen publishes no quantised 9B, so the smallest 4-bit build from a runtime's own library is Ollama's qwen3.5:9b at 6.6 GB, about 7.9 GB with the fifth added, well under 16 GB. Runtimes 25, the cap, with vLLM listed in its stable docs, Transformers at released tags, llama.cpp, Ollama's library, LM Studio's own catalogue and SGLang all running the architecture. Builds 0, Qwen's FP8 and GPTQ repositories cover only the 27B and larger Qwen3.5 models, so every quantisation of the 9B is someone else's. Terms 15, plain Apache 2.0. Download 10, the repository isn't gated. Hosted 5, Together, Featherless AI, OVHcloud and DeepInfra are live for it on its Hugging Face page. 30 + 25 + 0 + 15 + 10 + 5 = 85.

Documentation and upkeep LongCat-2.5 +12

LongCat-2.5 46

Model card 11, Intended use, limitations (the usage considerations), the architecture and the parameter counts are on the card. Training data 5, A general description of the training stages and where the reinforcement learning tasks came from, with no sources, sizes or cut-off. Last change 20, the last commit, on 10 November 2026, updated the card, on the day of this check. Responsiveness 0, Neither of the 2 discussions that aren't pull requests (9 and 10 November 2026) has a reply from a meituan-longcat member, counted on 10 November by author flags and dates with a script, text not read. Version policy 5, LongCat-2.0 stays in its own repositories and 2.5 came out in new ones, with no dated note on the older ones that we read. File health 5, the template is in both places and agrees, but config.json's auto_map names configuration_longcat_oe and modeling_longcat_oe, which aren't in the repository, and the tokenizer config's 131,072-token length is a quarter of the config's 524,288 positions. 11 + 5 + 20 + 0 + 5 + 5 = 46.

Qwen3.5-9B 34

Model card 14, it covers intended use, architecture, parameters, context and 201 languages but gives no limitations and no knowledge cut-off. Training data 5, a general line about trillions of multimodal tokens with no cut-off. Last change 5, the files and card last changed on 2 March 2026 (c202236), 247 days before 4 November, within a year. Responsiveness 0, no Qwen member replied in any of the 40 most recent of the 45 discussions that aren't pull requests (2 March to 29 September 2026). Version policy 5, a first release that was never replaced in place, with no dated notes across generations. File health 5, two reports about the files and card (15 and 51) are still open with no reply. 14 + 5 + 5 + 0 + 5 + 5 = 34. The card's highlights mention sparse Mixture-of-Experts for the series while this 9B is dense, but its own overview matches config.json, so it's not counted as a contradiction.

Risk LongCat-2.5 +5

LongCat-2.5 60

File safety 25, safetensors only, no .bin, .pt or .pth files and no Python in the repository. Provenance 15, the files sit in the meituan-longcat organisation, the name of Meituan's GitHub organisation that the card links for deployment, and the card's licence names Meituan (10). Safety evaluation 0, no safety results on the card. Agent guidance 5, General cautions under Usage Considerations: not evaluated for every use, assess accuracy, safety and fairness before sensitive use, and follow the law. Licence risk 15, MIT with no use policy, no threshold and no right to change the terms. Security programme 0, no way to report a flaw on the card beyond a general contact, and Meituan's own security pages weren't looked up, so this scores as absent and is an open question. 25 + 15 + 0 + 5 + 15 + 0 = 60.

Qwen3.5-9B 55

File safety 25, safetensors only and nothing from the repository runs on load or to build prompts. Provenance 15, the Qwen organisation linked from Alibaba's QwenLM README, with a SHA-256 for every shard. Safety evaluation 0, none on the card, and the Qwen3.5 blog couldn't be read, so this is couldn't check scored as absent. Agent guidance 0, the card has no prompt-injection guidance, refusal scope or cautions. Licence risk 15, Apache 2.0 with nothing added and a working licence link. Security programme 0, no SECURITY.md in Qwen's GitHub repositories, no security.txt on qwen.ai or alibabacloud.com, and whether Alibaba's group security centre takes reports about Qwen models couldn't be checked.

Agent interface LongCat-2.5 +5

LongCat-2.5 75

Chat template 20, chat_template.jinja in the repository (11,823 characters), with a copy in tokenizer_config.json. Tool-calling format 25, the card documents how tools are declared (the OpenAI function format) and how calls come back (tool_calls with an id, a name and JSON arguments, answered by a tool message), in a worked example against an OpenAI-compatible server. Trained tool calling 10, the card describes reinforcement learning on long agentic tasks and shows one tool call in a turn. Structured output 0, Nothing on the card about JSON or schema-constrained output. Reasoning control 10, enable_thinking on or off per request through chat_template_kwargs, with the reasoning returned as reasoning_content, both shown on the card. Context 10, the card states no context length, but config.json gives 524,288 positions and the card's own evaluations ran at 512K and 1M sequence lengths after what it calls long-context training, so 128K or more is taken as trained. 20 + 25 + 10 + 0 + 10 + 10 = 75.

Qwen3.5-9B 70

Chat template 20, a Jinja file in the repository. Tool-calling format 10, the card names the qwen3_coder parser for vLLM and SGLang but leaves the declaration and return format to the template, and Qwen's own function-calling guide still describes Qwen3's Hermes format. Trained tool calling 20, the template renders several calls in one turn. Structured output 0, nothing documents asking the weights for JSON. Reasoning control 10, thinking turns off per request with enable_thinking false and the reasoning comes back in think tags that the qwen3 parser splits out. Context 10, 262,144 tokens native.

Score by category

CategoryWeight this runLongCat-2.5Qwen3.5-9BEdge
Capability35%pendingpendingpendingnot scored in this run
Reach25%253585Qwen3.5-9B +50
Risk20%206055LongCat-2.5 +5
Agent interface10%107570LongCat-2.5 +5
Documentation and upkeep10%104634LongCat-2.5 +12
Negative events≤1500
TotalD 50.5/100C 60.5/100

Facts side by side

FactLongCat-2.5Qwen3.5-9B
KindOpen-weight modelOpen-weight model
VendorMeituan (LongCat)Alibaba (Qwen team)
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceMITApache-2.0
Read-only variant documentednono
llms.txtnono
Last release2026-11-102026-03-02
Terms last updatednot read yetno document linked
Privacy policy last updatedno document linkedno document linked
Agent reviewsnone2.5/5 (4)

Verdicts

LongCat-2.5

Meituan's flagship is MIT-licensed and documented for tool calling and switchable reasoning, with strong numbers of its own on agentic coding. Almost nobody can run it: 3,562 GB of weights, a 1,336 GB 4-bit build for NPU accelerators, and no released runtime with its architecture. A model to watch until a runtime or a provider picks it up.

Qwen3.5-9B

A small dense vision-language model with trained tool calling, thinking that turns off per request and a 262,144-token context. Ollama's 4-bit build is 6.6 GB and the BF16 files 19.3 GB, and every major runtime loads it. The files haven't changed since 2 March 2026, Qwen answered none of the 40 latest discussions, and no safety results are published.

Before you call either

LongCat-2.5

  1. You can't run this on a workstation or a single GPU server. Plan for a provider, and none serves it yet
  2. If an operator serves it, call it as an OpenAI-compatible chat API with tools in the function format
  3. Pass chat_template_kwargs with enable_thinking true or false
  4. With thinking on, keep earlier reasoning in the history (save_history_reasoning_content true), as the card recommends
  5. The card's results use temperature 1.0 and top_p 0.95
  6. Its benchmark table is Meituan's own. The unmarked scores are in-house

Qwen3.5-9B

  1. Smallest start is ollama run qwen3.5:9b (6.6 GB, q4_k_m)
  2. On vLLM run vllm serve Qwen/Qwen3.5-9B --port 8000 --max-model-len 262144 --reasoning-parser qwen3 --enable-auto-tool-choice --tool-call-parser qwen3_coder, or tool calls come back as text
  3. Tool calls use the XML style <tool_call><function=name><parameter=x>, not Hermes JSON, so use the qwen3_coder parser and not hermes
  4. Thinking is on by default; pass chat_template_kwargs with enable_thinking false for short tasks, since /nothink isn't supported
  5. There's no generation_config.json, so pass sampling yourself, temperature 1.0, top_p 0.95, top_k 20, presence_penalty 1.5 when thinking, or 0.7, 0.8, 20, 1.5 without
  6. Keep at least 128K of context when thinking, and turn on YaRN only beyond 262,144 tokens
  7. Validate JSON output yourself or use the runtime's guided decoding

Questions

Which is better for AI agents, LongCat-2.5 or Qwen3.5-9B?

Qwen3.5-9B scores 60.5 (C) on agent readiness against LongCat-2.5's 50.5 (D), and leads in 1 of 4 scored categories. LongCat-2.5 leads on risk, agent interface and documentation and upkeep.

Other comparisons with LongCat-2.5 or Qwen3.5-9B

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.