Qwen Code alternatives (2026)

Free / OSS · OSS/MIT · 4.2k GitHub stars

VerdictMIT Codex desktop/CLI companion. Handy for visual MCP and skills configuration; audit auth, relay endpoints, and unrestricted templates before trusting it.

CatchVs T3 Code: Codex-X is Codex-specific visual configuration plus MCP/skills, not a broad remote coding environment or an independent coding model. It handles `auth.json`, supports third-party relays, and allows unrestricted prompt templates — review where credentials go, which endpoint receives requests, and what instructions can execute before using a release. Treat relays as a trust decision, not a convenience toggle.

Free / OSS · OSS/MIT · 217k GitHub stars

VerdictMIT BYOK agent across CLI/desktop/IDE. The real catches are on /log: date stamp and compaction.

CatchTwo catches worth reading on /log: “The date stamp is a trigger channel” (auto today’s-date × open-weight LoRA as a time-release fuse) and “Compaction ate the denial” (long sessions prune hard vetoes; compaction is untrusted rewrite). Re-read those two notes before you treat OpenCode as set-and-forget.

Free / OSS · Freemium · 130k GitHub stars

VerdictOpenAI’s answer to terminal agents — open CLI, paid models; budget the plan or the API.

CatchThe CLI is open source, but the models are not free: you pay through ChatGPT plan quotas or API spend. Codex Web runs on OpenAI’s cloud, not on your machine. The install.sh, brew and npm routes are supply-chain choices, so pin a release binary when that matters. Vs Claude Code or OpenCode: this is OpenAI’s first-party agent, tied to ChatGPT plans or OpenAI API keys.

Free / OSS · OSS/MIT · 27.7k GitHub stars

VerdictMIT IDE+CLI agent with MCP marketplace. Roo’s active heir, not a second OpenCode.

CatchPitch IDE+platform, not “another OpenCode.” Gateway/account is convenience; BYOK stays. Marketplace and modes are the differentiator vs plain CLI harnesses. Enterprise governance rides Anaconda — evaluate if that middle layer matters for your org.

Free / OSS · Apache-2.0 · 47.6k GitHub stars

VerdictApache-2.0 hybrid review agent. Deterministic+LLM vs Semgrep/Gitleaks and vs general coding agents; BYO LLM.

CatchVs Semgrep/Gitleaks (deterministic SAST/secrets): OCR adds an LLM agent layer for context-heavy review, not a drop-in replacement for static rules alone. Vs Claude Code/SWE-agent/OpenHands (general coding agents): OCR is a purpose-built review harness, not a full autonomous coder. BYO LLM cost — you bring the model endpoint and pay the provider; the OSS CLI itself is free.

Free / OSS · OSS/MIT · 31.2k GitHub stars

VerdictMIT agent security-audit skill. Phased findings vs mcp-security-audit; not a SaaS scanner.

CatchSkill only — not a standalone SaaS scanner. Distinct from mcp-security-audit (awesome-copilot skill for .mcp.json / MCP config audits) and from OWASP ASI checklist skills: this is Cloudflare’s multi-phase code/security audit skill for a coding-agent host. You still need the agent runtime and any scanners the skill shells out to.

Free / OSS · Apache-2.0 · 114k GitHub stars

VerdictMIT skill surface with BSL engine bits. Use to cut coding-agent token spend; read the BSL boundary before productizing the runtime.

CatchEngine-linked runtime directories (engine/, proxy/, rewriter/, and related) are Business Source License 1.1, not MIT — see LICENSING.md / LICENSE.BSL before embedding or offering a hosted Caveman runtime. Vs LiteLLM: Caveman is output/style compression for agent hosts, not a multi-provider model gateway. Terse output can hide nuance; keep quality checks on hard tasks.

Free / OSS · Freemium · 243 GitHub stars

VerdictMIT MCP wrapper over paid Jev. Use for continuous in-agent quality signals when you already have a TypeSafe key.

CatchScoring depends on a paid/early-access TypeSafe Jev API key — the MCP is OSS, the brain is not (same family as typesafe-computer-use). Vs CodeRabbit/PR bots: this is an in-loop agent checkpoint, not a GitHub review bot. Jev returns scores, not prose root-cause essays — the coding agent still has to diagnose.