Qwen 3.6 35B-A3B (Unsloth)

Qwen 3.6 35B-A3B is Alibaba’s MoE model with 35 billion total and approximately 3 billion active parameters per token, released on April 22, 2026 under Apache 2.0 with open weights for local deployment. The hybrid attention architecture combines classic attention with a linear variant; Multi-Token Prediction noticeably accelerates generation.

Alibaba Version 3.6 Commercial use permitted MoE 35 B (3 B active) 262 K Context 12/2025 locally tested

  • Open Weights
  • Workstation
  • vLLM
  • Text
  • Vision
  • Video
  • Instruction-Tuned
  • Real-Time

Sovereign Risk: MEDIUM The model originates from the Qwen team (Alibaba), based in China. The classification of risk as ‘medium’ rather than ‘high’ reflects that this is an open-source model under the permissive Apache 2.0 license, which can be run entirely locally without any cloud connection to Alibaba servers. In purely local operation, NSL relevance is virtually eliminated; a theoretical residual risk due to the Chinese developer jurisdiction remains for the purposes of the provenance assessment.

Tool-use profile: 6 assets in detail

Comparison of asset performance (P1/P2/Combined) against the fleet average

Asset performance (radar)

Score Breakdown vs. Fleet Average


Tool-use details

Asset performance, reliability, and runtime profile

CrucibleMark evaluates tool use across 6 independent tests. Click a test name for details.

Reliability

  • Tool Call Valid: No
  • Retry: Not required
  • Hallucination: Not detected

Reliability measures how consistently a model actually executes tool calls: Tool Call Valid schema and format accepted, Retry Required successful only after retry, Hallucination Flag fabricated tools or parameters detected. All three green means production-ready.

Runtime profile

Call 1
1.17
First Request
MCP
1.33
Protocol Latency
Synthesis
7.19
Response Generation
Total
58.11
Sum of All Phases
Token
11183
Input + Output
Cost
$0
Cost per Run

The runtime profile shows the latency and cost metrics for the model run: Call 1 First Request, MCP Protocol Latency, Synthesis Response Generation, Total sum of all phases, supplemented by Token input and output and Cost cost per run.

Tool-use review

Updated · Instruction-Tuned

Deployment Verdict

Deploy conditionally, because tool execution is usable, but MCP calls are not consistently valid and synthesis fidelity remains too weak for production knowledge and compliance pipelines.

Tool Execution Profile

Qwen 3.6 35B-A3B does not exhibit reliably agentic tool behavior. It can execute tools when the path is already clear, but it does not select them consistently. This is visible directly in the gap between Web Search & Tool Selection, which tests the choice between search and fetch without an explicit hint, at P1 35, and URL Construction & Fetch, which measures the derivation of a target URL and the subsequent retrieval, at P1 80. The model tends to follow a familiar retrieval pattern rather than situationally recognizing which tool the task requires.

On the positive side, HTTP Fetch & Extract at P1 80 points to solid mechanical execution. On the negative side, the global finding Tool-Call valid: false stands. For an MCP pipeline this means: the intent to use tools is present, but the protocol behavior is not robust enough for unattended orchestration.

Synthesis Fidelity

How well does it condense tool results? Only to a limited degree. The P2 score of 45.83 is the actual bottleneck. For HTTP Fetch & Extract, which requires precise facts from real page content, it remains usable at P2 60. For Multilingual Search & Synthesis — cross-lingual research with a German-language summary — likewise P2 60. That is not sufficient for reliable condensation in production decision or documentation pipelines. EU License Research falls clearly short at Combined 26.

Does it stay within the tool result or fall back on training data? In the honeypot EU License Research, which tests exactly this, no hallucination was detected. That matters. The model does not fabricate external facts here. At the same time, P2 20 is a warning signal: it stays formally within the safe boundary, but condenses the retrieved information only weakly. Confidence in factual accuracy is therefore higher than confidence in the usability of the answer.

Error Resilience

On Tool Failure Handling (404), which tests for transparent handling of a failed retrieval, the model does not hallucinate substitute content. That is a production-relevant positive. P2 60 indicates that it communicates error states acceptably, even if the response is not particularly clear or actionable. For operational pipelines this is acceptable, as long as an upstream system handles retry or fallback logic.

Operational Profile

Total 58.11s per run: slow.
Call 1 1.17s, MCP latency 1.33s, Call 2 7.19s: frontload fast, overall flow sluggish.
Cost/run: local. Inexpensive to operate, but the runtime is not proportionate to the only moderate overall performance.

Summary & Recommendation

Suitable for local, sovereignty-oriented pipelines with human oversight, particularly where fetch-heavy tasks and simple URL-based retrievals dominate. Not suitable for autonomous MCP orchestration, compliance workflows, dynamic research chains, or any pipeline where correct tool selection and clean condensation must hold without review. If you deploy it, treat it as a cost-efficient local worker under strict tool validation and with downstream quality control.

This analysis was generated automatically based on benchmark data. Model used: GPT 4.5 by OpenAI. The raw data and full methodology are documented in the GitHub project.