Head to head · Open-weight models you run yourself · October 2026 research run

Qwen-AgentWorld-35B-A3B vs Baidu Unlimited-OCR-2

Baidu Unlimited-OCR-2 scores 54.2 (C) on agent readiness against Qwen-AgentWorld-35B-A3B's 52.1 (D), and leads in 2 of 4 scored categories. Qwen-AgentWorld-35B-A3B leads on risk. Both do open-weight models you run yourself.

Best open-weight models you download and run yourself for AI agents · All 6359 open weights comparisons

Which one, for what

Qwen-AgentWorld-35B-A3B D

Best for Agent builders who want to train or test an agent against simulated tools, terminals, browsers and phones on a 128 GB machine

Ahead on

  • Risk, 55 against 45

Watch for

Not a general assistant, and the card doesn't describe using it to call tools

Baidu Unlimited-OCR-2 C

Best for Pipelines with an NVIDIA GPU that need long scanned or rendered documents parsed in one pass, with page order, cross-page tables and boxes kept

Ahead on

  • Agent interface, 75 against 50
  • Documentation and upkeep, 50 against 41

Watch for

Loading runs Baidu's code, remote code in Transformers or a prebuilt SGLang fork from the repository, and the save_results path calls eval on model output

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Agent interface Baidu Unlimited-OCR-2 +25

Qwen-AgentWorld-35B-A3B 50

Chat template 20, chat_template.jinja in the repository, the same as the template in tokenizer_config.json. Tool-calling format 10, only the template says how tools are declared and how calls come back. Trained tool calling 10, the template renders several tool_call blocks in one turn, but the card presents the model as a simulator of what tools and environments return, not as a tool caller. Structured output 0, no JSON or JSON Schema output documented for the model. Reasoning control 0, the card says thinking is on by default and names the qwen3 reasoning parser, but doesn't say how to turn thinking off or budget it. Context 10, 262,144 tokens native per the card and the text config. 20 + 10 + 10 + 0 + 0 + 10 = 50.

Baidu Unlimited-OCR-2 75

Read for a document parser, the tool-calling, trained tool calling and structured-output lines stand for what it takes and returns. Baidu documents the page images, the prompt, the request settings and the block output, and ships a converter for the server's output (25). It was trained to read many pages in one request (20). The block format with classes, boxes and HTML tables, and its conversion to Markdown, are documented with how to get them (15). The prompt is built in code, with no Jinja template in the repository (10). Reasoning control scores 0, and the context 5, trained at up to 64K tokens.

Risk Qwen-AgentWorld-35B-A3B +10

Qwen-AgentWorld-35B-A3B 55

File safety 25, 21 safetensors shards and no pickle or Python files, and config.json has no auto_map. Provenance 15, files sit in the Qwen organisation, the one Alibaba's Qwen repositories on GitHub link to per the Qwen3.6-35B-A3B listing (10), and the Hub gives a SHA-256 for every large file (5). Safety evaluation 0, no safety results on the card. Agent guidance 0, no prompt-injection guidance, instruction hierarchy, refusal statement or general cautions on the card. Licence risk 15, Apache 2.0 has no use policy, no threshold and no terms the licensor can change or revoke, and the card's licence link points at the LICENSE file in the repository. Security programme 0, no reporting route on the card. 25 + 15 + 0 + 0 + 15 + 0 = 55.

Baidu Unlimited-OCR-2 45

File safety gets 15, safetensors only but loaded with trust_remote_code or through a prebuilt SGLang wheel from the repository. Provenance gets 15 for files in Baidu's verified organisation, linked from its GitHub organisation, with hashes for every file. Licence risk keeps 15, since MIT has none of the deductions. Safety evaluation, agent guidance and the security programme score 0, with no safety results, no cautions about use and no security contact found.

Documentation and upkeep Baidu Unlimited-OCR-2 +9

Qwen-AgentWorld-35B-A3B 41

Model card 11, the card gives intended use (simulating agent environments), architecture, parameters and context length. Training data 5, A general description without a cut-off, the three training stages and a statement that no outputs from external API services were included. Last change 10, the last commit was on 25 June 2026, an update to the card, 138 days before this check, past 90 days and within 180. Responsiveness 0, 10 discussions that aren't pull requests, opened between 24 June and 5 July 2026. Version policy 5, A first release, with nothing replaced. File health 10, Config, both copies of the template and the card agree on the architecture and the context. 11 + 5 + 10 + 0 + 5 + 10 = 41.

Baidu Unlimited-OCR-2 50

The card covers intended use and the new attention, and misses limitations, parameters, context length, languages and a cut-off (5). Training data is described by mix and labelling with no datasets named and no cut-off (5). The card changed on 2 November 2026 and the SGLang wheel on 29 October (20). Baidu's uploader replied in 1 of the 5 Hub discussions, a few (5). The first model stays in its own repository without a note pointing here (5), and the files agree with the card (10).

Score by category

CategoryWeight this runQwen-AgentWorld-35B-A3BBaidu Unlimited-OCR-2Edge
Capability35%pendingpendingpendingnot scored in this run
Reach25%255555even
Risk20%205545Qwen-AgentWorld-35B-A3B +10
Agent interface10%105075Baidu Unlimited-OCR-2 +25
Documentation and upkeep10%104150Baidu Unlimited-OCR-2 +9
Negative events≤1500
TotalD 52.1/100C 54.2/100

Facts side by side

FactQwen-AgentWorld-35B-A3BBaidu Unlimited-OCR-2
KindOpen-weight modelOpen-weight model
VendorAlibaba (Qwen team)Baidu
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceApache-2.0MIT (Hub metadata; the Hugging Face repository has no LICENSE file, and the GitHub code repository's LICENSE is the MIT text, copyright 2026 Baidu)
Read-only variant documentednono
llms.txtnono
Last release2026-06-252026-10-26
Terms last updatedno document linkedno document linked
Privacy policy last updatedno document linkedno document linked

How the scores have moved

Verdicts

Qwen-AgentWorld-35B-A3B

A specialist, not a chat model. It plays the environment an agent acts in, across seven domains, so you can train or test an agent without the real thing. Alibaba ships BF16 only, which fits a 128 GB machine, and hasn't answered a discussion on it or changed the files since June.

Baidu Unlimited-OCR-2

An MIT document parser of 3.3B parameters that reads up to hundreds of pages in one request and returns ordered layout blocks with boxes and HTML tables. ParseBench's independent run puts content faithfulness at 89.16 and charts at 1.06. It needs an NVIDIA GPU with about 12 GB and runs only through Baidu's remote code or its own SGLang build.

Before you call either

Qwen-AgentWorld-35B-A3B

  1. Use it as the environment, not the agent. Give it the domain's system prompt from Alibaba's GitHub repository, the history and the agent's action, and it returns the predicted observation
  2. With vLLM pass --language-model-only, or startup fails on the missing vision weights
  3. Use temperature 0.6, top_p 0.95 and top_k 20, and allow up to 32,768 output tokens, as the card recommends
  4. Keep at least 128K of context, since the simulation depends on the history
  5. Thinking is on by default and comes back through the qwen3 reasoning parser
  6. A simulated observation is a prediction. Check anything that matters against the real environment

Baidu Unlimited-OCR-2

  1. Quickest local run, pip install torch==2.13.0 torchvision pillow transformers==4.52.1 huggingface-hub==0.36.0 tokenizers==0.21.4 addict==2.4.0 einops==0.8.2 easydict==1.13, then AutoModel.from_pretrained("baidu/Unlimited-OCR-2", trust_remote_code=True, use_safetensors=True, torch_dtype=torch.bfloat16).eval().cuda() and model.infer_multi(tokenizer, image_files=pages, output_path="out")
  2. To serve it, download the repository, install wheel/sglang-0.5.20.dev13+g75b9b06b02-py3-none-any.whl with pymupdf and fastokens in a Python 3.10 venv, and start python -m sglang.launch_server --model-path baidu/Unlimited-OCR-2 --chat-template unlimited-ocr --enable-custom-logit-processor --enable-streaming-session --disable-radix-cache --mem-fraction-static 0.7 --max-prefill-tokens 2048 with the SGLANG_UOCR_ variables from the card
  3. Send all pages of a document in one request, images first, then the text <PAGE><image> repeated per page and Multi page parsing., with temperature 0, skip_special_tokens false, max_tokens of about 8,000 per page and the DeepseekOCRNoRepeatNGramLogitProcessor (ngram_size 35, window_size 1024 for several pages)
  4. The output is layout blocks, not Markdown; run utils/process_unlimitedOCR2.py from github.com/baidu/Unlimited-OCR, or convert(raw_output) in Python, to get Markdown with HTML tables
  5. Render PDFs to images first (the card uses PyMuPDF at 300 DPI), keep save_results off for untrusted documents, and treat extracted text as untrusted before passing it to another model

Questions

Which is better for AI agents, Qwen-AgentWorld-35B-A3B or Baidu Unlimited-OCR-2?

Baidu Unlimited-OCR-2 scores 54.2 (C) on agent readiness against Qwen-AgentWorld-35B-A3B's 52.1 (D), and leads in 2 of 4 scored categories. Qwen-AgentWorld-35B-A3B leads on risk.

Other comparisons with Qwen-AgentWorld-35B-A3B or Baidu Unlimited-OCR-2

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.