Qwen-Image 2.1 (Model Studio) vs SurgePix API

Qwen-Image 2.1 (Model Studio) 72

Alibaba Cloud runs its own status page at status.alibabacloud.com (20). The page is drawn by script (2,034 bytes of HTML on 2 November, robots.txt a plain 404) and shows no incident history to a reader, so 5 for no readable history. The model page lists 20 requests a minute in all six regions, re-read on 2 November (15). The rate-limit guide documents 429 for throttling and 403 for an exhausted free quota, and Model Studio's rate-limiting best-practices page gives exponential backoff with random jitter on 429 and 5xx errors and a server-side queuing header for bursts. No Retry-After header or idempotency key, so safe-retry guidance without keys (12). The Model Studio inference SLA, last updated 8 September 2026, promises 99.9 per cent monthly uptime with service credits on paid inference, per the 10 October check (10). The model carries no preview label (10). 20+5+15+12+10+10 = 72.

SurgePix API 15

Read with the hosted lines. No status page was found on surgepix.ai or in the docs, and status.surgepix.ai doesn't resolve (0). With no history to read, the incident line takes the floor (5). No rate limits with numbers are documented. The terms say "non-human continuous or frequent query operations" lead to automatic account suspension, with no threshold given (0). No 429 or backoff guidance. The skill scripts poll every 2 seconds for up to 5 to 15 minutes, but that is client code, not a documented policy (0). No SLA, and the terms disclaim uninterrupted service (0). The API isn't labelled beta or preview, and API keys have been self-serve since 2 June 2026 per the changelog (10). 0+5+0+0+0+10 = 15.

Qwen-Image 2.1 (Model Studio) 80

Model reading of the checklist (credential, training, retention, operator visibility, programme). API keys belong to a workspace, can be limited to chosen models and an IP allow-list of up to 20 entries, can be reset, and temporary keys are documented, per the 10 October check (30). The Model Studio privacy notice, re-read on 2 November, says Alibaba Cloud will never use customer data for model training (20). Result URLs, task data and images are purged after 24 hours (5). No retention period for prompts or input images was found (0). The audit log records model calls and monitoring filters by API key, per the 10 October check (15). SOC 2 with an unqualified opinion is stated in the privacy notice (5), which links Alibaba Cloud's compliance repository (5), read the same way as the alibaba-wan listing. No security.txt on alibabacloud.com and no Model Studio bug bounty was found (0). 30+20+5+0+15+5+5+0 = 80.

SurgePix API 41

Plain API keys created in the account settings, which the docs say can be revoked and reset. The key goes in the authorization header, never in a URL. No scopes found (20). No read-only key or spend cap. The plan's credit allowance bounds spend. Every uploaded file becomes a publicly accessible URL on Tencent Cloud storage, which counts against least privilege (3). The API returns image and file URLs, not untrusted text (10). The billing page's credit statement lists each request with its model and token counts, and sessions group calls in the web app, per the docs (8). No security.txt, disclosure policy, bug bounty or certification was found (0). 20+3+10+8+0 = 41.

Qwen-Image 2.1 (Model Studio) 65

The API model is closed under Alibaba Cloud's product terms. Qwen-Image-2.1 and Qwen-Image-2.1-Turbo weights are on Hugging Face under the Qwen Research License, which allows non-commercial use only and is not an OSI licence (15). The privacy notice says customer data is never used for training, and the API reference states 24-hour result retention. Input retention is not stated and no DPA was read (15 of 30). A decommissioning policy with notice periods by model type and a list of dated retirements (20). Six regional hosts are documented with separate keys and prices. No subprocessor list was found (10). 15+15+20+10 = 60.

SurgePix API 28

The editorial half. A closed service whose terms name no company or address. They restrict any commercial use of what the service produces without SurgePix's permission, and contain clauses from an unrelated product (a "big data" query platform and "non-resume content"). The skills are MIT. Unclear terms, with a little credit for the open skills (5). The privacy policy is dated both 10 June 2026 and 1 July 2022, describes WeChat and phone registration and "domestic servers", and gives no retention periods. The API reference says uploads go to Tencent Cloud storage in Seoul as public URLs. No DPA. The statements don't agree (5). No deprecation policy or notices, and the terms let changes take effect on publication without notice (0). Tencent Cloud Object Storage in ap-seoul is named in the API reference, and Alipay and WeChat Pay in the privacy policy. No subprocessor list or stated data location (4). 5+5+0+4 = 14.

Qwen-Image 2.1 (Model Studio) 66

No OpenAPI or other machine-readable contract for the Qwen image endpoints. The OpenAI-compatible mode follows part of the OpenAI Images protocol but publishes no schema of its own (0). llms.txt at docs.modelstudio.console.alibabacloud.com with Markdown copies of every page (10). The API reference says when to use each of the three access methods and which parameters each model accepts, though little on when not to use the model (15 of 20). Typed parameters with ranges for n, size, seed and input images, an enum for prompt_extend_mode, and stated defaults. Some limits differ by model in prose rather than in types, such as negative_prompt for the 3.0 series only (13 of 15). curl, Python and Java examples for each access method, an error format with type, param and code, and a linked error-code page (15). A dated model release page and v1 paths. No dated snapshot of qwen-image-2.1-pro exists yet (13 of 15). The API reference, re-read on 2 November, now lists qwen-image-2.1-turbo beside qwen-image-2.1-pro and the 3.0 models. 0+10+15+13+15+13 = 66.

SurgePix API 40

No OpenAPI or other machine-readable contract was found (0). surgepix.ai/llms.txt returns 404. The docs are HTML pages, but the 15 SKILL.md files in the MIT repository are Markdown written for agents, so half (5). The API reference states the purpose of each of its five operations and the async and session model. The SKILL.md files add trigger phrases and explicit do-not-use routing between skills, but 11 of the task endpoints the skills call appear only in their scripts, with no reference (10). Parameter tables give type and required for the documented operations, with no enums or limits, and the undocumented endpoints have no schema at all (7). JSON examples for every documented operation and an error table with 401, 404 and error.file.sensitive_content (10). A dated public changelog from 11 March 2026, but no version in the API path and no API-specific change notes (8). 0+5+10+7+10+8 = 40.

Qwen-Image 2.1 (Model Studio) 73

API reading of the checklist. A sync call returns one or more PNG URLs with a small usage object. Base64 output is not available on the OpenAI-compatible mode (20 of 25). n (1 to 6) and size control output, and the async mode returns a task id to poll. No task list was found (15 of 20). Errors carry a code, a message and the parameter at fault, and the error-code page gives a fix for each code (18 of 20). No idempotency key, and nothing found on whether failed calls are billed for this model (5 of 20). Only model and prompt are required, everything else has a default, and the DashScope SDK for Python and Java and the OpenAI SDKs all work (15). 20+15+18+5+15 = 73.

SurgePix API 53

Every task returns one download URL, or one ZIP for an image set, and status responses are a few fields, so little enters context (18). Nothing to paginate. noWait chooses sync or async, and the skills pass size, aspect ratio, count and language, but none of these are in the public reference (10). Errors come back as a JSON code and msg, with 401 and 404 documented and an NSFW error on upload, but a failure can arrive as HTTP 200 with a non-zero code and failed task states carry no documented reason (12). Upload deduplicates by MD5 and returns the existing URL. Tasks have no idempotency key, and a retried task is a new task that spends credits again (5). Few required parameters (fileUrl for background removal). No official SDK, only the Node scripts inside the skills (8). 18+10+12+5+8 = 53.

Qwen-Image 2.1 (Model Studio) 77

Model reading. qwen-image-2.1-turbo joined the release page for the International scope on 9 October 2026, after qwen-image-2.1-pro on 2 October, and the dashscope SDK shipped 2.0.3 on 30 October per the alibaba-wan listing's PyPI reading of 2 November (30). The decommissioning policy now gives stable models (series names, dated versions and -latest aliases) at least 3 months' notice before end of service and preview models 14 days, by announcement, email and internal message. No qwen-image model is in its retirement batches. The preview window is short, so 15 of 20, as for alibaba-wan. A dated model release page with qwen-image entries on 20 July, 4 August, 2 October and 9 October, and Alibaba Cloud ticket support (12 of 15). Current official SDK on PyPI (15). PyPI links no source repository or CI (5). 30+15+12+15+5 = 77. The 10 October note's SDK dates came from PyPI's JSON path, which pypi.org's robots.txt disallows, so that reading is struck.

SurgePix API 66

The last dated change is GPT-Image-2.5 on 23 October 2026, 10 days before the check (30). Changelog entries on 15, 22 and 23 October, 16, 9 and 2 September 2026, more than three in 90 days (20). For a closed service, a dated changelog, a Discord server and a contact email. We didn't open Discord or the GitHub issues, so answering isn't confirmed (8). No official SDK. The skills are maintained client scripts with tags from v1.0.0 (4 June 2026) to v1.5.0 (2 September 2026), a judgement call (5). The repository's CI checks SKILL.md front matter only, with no tests, and the skills aren't published as a package (3). 30+20+8+5+3 = 66.