Roll out Qwen Code only after each engineer has a model route, Coding Plan keys are kept out of automation, and usage statistics are off. Export its OpenTelemetry events as the audit trail it otherwise lacks, and test MCP, proxy, and IDE setups on your network first. This checklist covers routes, limits, data, telemetry, integrations, and review.
When you need this
- Engineers relied on the free Qwen OAuth tier, which ended on April 15, 2026.
- A team wants to run Qwen Code on local models or Alibaba Cloud Model Studio and skip a vendor-backed seat plan.
- Security asks what Qwen Code sends home and what record exists of what it ran.
Evaluation criteria
Choose a route per engineer
Which model route does each engineer use?
Look forCoding Plan Pro costs US$50 a month per account for interactive use, and accounts may not be shared. Token Plan and pay-as-you-go Model Studio keys, third-party routes such as DeepSeek, Kimi, and OpenRouter, and local models through Ollama or vLLM are the other routes. The Lite plan closed to new subscriptions on March 20, 2026.
Respect Coding Plan limits
Will any use hit the caps or the ban on automation?
Look forCoding Plan Pro allows up to 6,000 requests per 5 hours, 45,000 a week, and 90,000 a month, and a task uses 5 to 30 or more model calls. Its key may not run automated scripts or application backends, so headless runs and pipelines need a pay-as-you-go key.
Turn off usage statistics
What does Qwen Code send home?
Look forUsage statistics are on by default for every auth method, including your own API key, and go to an Alibaba Cloud collection endpoint until you turn them off in settings. On Model Studio, Alibaba states it never trains on your data and stores data generated from model calls.
Export telemetry as the audit trail
What record exists of what the agent ran?
Look forQwen Code documents no SSO, SCIM, or admin audit log. Its OpenTelemetry log events, such as qwen-code.user_prompt and qwen-code.tool_call, can go to your own backend; keep them with each engineer's identity.
Test MCP, proxy, and IDE setups
Does it work on your network and tools?
Look forConnect every MCP server you need and test proxy settings against in-house model services. Test the IDE plugin against local models too. In March 2026 an IntelliJ IDEA 2026.1 user found the plugin kept trying cloud sign-in with Ollama configured, a bug a maintainer reported fixed in v0.17.1.
Watch context and review changes
Is context use under control, and does a person approve every change?
Look forPractitioners report subagents starting at about 105,000 tokens and cache invalidation on small follow-ups in the VS Code add-on, so watch token use per task. Keep a human review on every change before merge.
Questions to ask vendors
- Which route does each engineer use, and who pays for it?
- Which runs are automated, and does every one of them use a pay-as-you-go key?
- Have we turned off usage statistics on every machine?
- Where do Qwen Code's OpenTelemetry events go, and who reviews them?
- Which MCP servers and IDEs have we tested on our network?
Red flags
- A Coding Plan key in a CI pipeline or application backend.
- One Coding Plan account shared across engineers.
- Usage statistics left on by default.
- No exported telemetry and no other record of what the agent ran.
- A rollout that assumes the free Qwen OAuth tier still exists.
Products in this piece
Sources
- Official documentation
- 7
- Public source
- 5
- Alibaba Cloud Model Studio: Coding Plan overview
- Qwen Code docs: Authentication
- Qwen Code docs: Terms of service and privacy notice
- Alibaba Cloud Model Studio: Privacy notice
- Qwen Code docs: Telemetry
- QwenLM/qwen-code on GitHub (README)
- Alibaba Cloud Model Studio: Qwen Code
- QwenLM/qwen-code issue #756: no_proxy ignored for a company's in-house Qwen3 service (Oct 2, 2025)
- QwenLM/qwen-code issue #2724: the IntelliJ IDEA 2026.1 plugin ignored local Ollama models until v0.17.1 (Mar 27, 2026)
- QwenLM/qwen-code issue #15660: subagents start with a 105,000-token prompt (Oct 26, 2026)
- r/LocalLLaMA: a coding harness that will not invalidate the context cache at each prompt (Sep 16, 2026)
- r/LocalLLaMA: Qwen-Code CLI free tier ended Apr 15 (Apr 16, 2026)