Computer Use Agents (CUAs) translate natural-language instructions into Graphical User Interface (GUI) actions such as clicks, keystrokes, and scrolls by relying on a Vision-Language Model (VLM) to interpret screenshots and predict grounded tool calls. However, grounding accuracy varies dramatically across VLMs, while current CUA systems typically route every action to a single fixed model regardless of difficulty. We propose Adaptive VLM Routing (AVR), a framework that inserts a lightweight semantic routing layer between the CUA orchestrator and a pool of VLMs. For each tool call, AVR estimates action difficulty from multimodal embeddings, probes a small VLM to measure confidence, and routes the action to the cheapest model whose predicted accuracy satisfies a target reliability threshold. For warm agents with memory of prior UI interactions, retrieved context further narrows the capability gap between small and large models, allowing many actions to be handled without escalation. We formalize routing as a cost--accuracy trade-off, derive a threshold-based policy for model selection, and evaluate AVR using ScreenSpot-Pro grounding data together with the OpenClaw agent routing benchmark. Across these settings, AVR projects inference cost reductions of up to 78% while staying within 2 percentage points of an all-large-model baseline. When combined with the Visual Confused Deputy guardrail, AVR also escalates high-risk actions directly to the strongest available model, unifying efficiency and safety within a single routing framework. Materials are also provided Model, benchmark, and code: https://github.com/vllm-project/semantic-router.
Figures & tables
Figure 1: The CUA action loop. Each iteration requires a full VLM inference call carrying screenshots (2–5K tokens each) plus context. A 20-step task accumulates ∼ 400K input tokens.
Figure 2: AVR architecture. The semantic router intercepts CUA tool calls, classifies difficulty via the multimodal embedder, probes the small VLM for confidence, injects memories for warm agents, and routes to the cheapest sufficient model. The contrastive KB (from the Visual Confused Deputy guardrail) can force escalation for high-risk actions.
Figure 3: AVR routing decision flowchart. Each tool call passes through safety check, difficulty classification, and confidence probing. Easy actions skip the probe entirely; risky actions go directly to the large model with guardrail verification. Memory injection (dashed) augments the probe for warm agents.
Figure 4: Three-tier routing policy (illustrative traffic shares from warm-agent projection). Most actions stay on the cheap small VLM. Hard or uncertain actions escalate to the large VLM. Safety-flagged actions go to the large VLM with additional guardrail verification.
Category
Model
Params
Acc. (%)
Source
Generalist
GPT-4o
∼ 1.8T †
0.8
( Li et al., 2025 )
InternVL2.5-78B
78B
11.5
( Li et al., 2025 ; Chen et al., 2025b )
CogAgent-18B
18B
7.7
( Li et al., 2025 ; Hong et al., 2024 )
Same family
Qwen2.5-VL-3B
3B
24.2
( Bai et al., 2025b )
Qwen2.5-VL-7B
7B
29.0
( Bai et al., 2025b )
Qwen2.5-VL-72B
72B
43.6
( Bai et al., 2025b )
Table 1: VLM grounding accuracy on ScreenSpot-Pro by model category. Accuracy is element-level (correct if the predicted coordinate falls within the target bounding box). “Params” is total parameter count; MoE models list active parameters in parentheses.
Figure 5: Model size vs. grounding accuracy on ScreenSpot-Pro (log scale). Generalist models (squares) cluster near zero regardless of size. Within Qwen2.5-VL family (triangles, dashed line), accuracy grows sublinearly. GUI specialists (circles) at 7B outperform generalists 100 × their size.
Condition
Turns
On 7B
On 139B
Total Cost
Savings
All on 139B (baseline)
20
0%
100%
$0.0558
—
Routing, cold
20
83%
17%
$0.0173
69%
Routing, warm
20
100%
0%
$0.0080
86%
Table 2: Cost reduction from confidence routing on the OpenClaw agent benchmark. “Warm” agents have accumulated team memories; “Cold” agents start from scratch.
Query
Cold (no memory)
Warm (memory)
Who is my team lead?
0.83
0.96
What backend language?
0.82
0.95
On-call alerting tool?
0.83
0.96
Deploy toolchain?
0.84
0.96
Production database?
0.83
0.96
Mean
0.83
0.96
Table 3: 7B confidence scores for knowledge-dependent agent queries with and without memory injection (threshold = 0.85).
Figure 6: Confidence score distribution for 5 knowledge-dependent queries. Cold agents (blue, left) cluster below the 0.85 threshold, triggering escalation. Warm agents (green, right) cluster well above, keeping all queries on the cheap 7B model. Memory injection creates a clean bimodal separation.
Scenario
Esc. α∗
Eff. Acc. ∗
Cost /call ∗
Savings
All on 72B
1.0
43.6%
$0.27
—
Cold AVR
0.35
42.1%
$0.13
52%
Warm AVR
0.15
41.3%
$0.08
70%
Warm AVR + difficulty
0.10
42.8%
$0.06
78%
∗ Analytical projection; not measured end-to-end on CUA tasks.
Table 4: Projected AVR cost savings for CUA grounding with a 7B/72B model pool. Escalation rates α are estimated from OpenClaw confidence distributions (text tasks), not measured on CUA grounding. Effective accuracy assumes the confidence threshold perfectly identifies the small model’s failures (optimistic). See Appendix E for derivation.
Figure 7: Projected cost per CUA tool call across AVR configurations (analytical, not measured end-to-end). Cold routing (no memory) projects 52% savings; warm routing with difficulty classification projects 78%.
Figure 8: Hypothetical warming curve based on the OpenClaw memory pattern (text tasks) projected to CUA grounding. The logarithmic shape is conjectured from the observation that the first few UI interactions provide the most novel layout information.
Appendix figures & tables2 assets
Supplementary material from the paper’s appendix.
Appendix
Model
Type
Params
Acc. (%)
Source
GPT-4o
Generalist
∼ 1.8T †
0.8
[ Li et al., 2025 ]
Qwen2-VL-72B
Generalist
72B
1.0
[ Li et al., 2025 ]
Qwen2-VL-7B
Generalist
7B
1.6
[ Li et al., 2025 ]
InternVL2.5-78B
Generalist
78B
11.5
[ Li et al., 2025 ]
Qwen2.5-VL-3B
VLM family
3B
24.2
[ Bai et al., 2025b ]
Qwen2.5-VL-7B
VLM family
7B
29.0
[ Bai et al., 2025b ]
Appendix
Table 5: Extended VLM grounding accuracy on ScreenSpot-Pro. “Active” denotes active parameters for MoE architectures.
Figure 9: Per-application accuracy distribution. Dashed lines show Qwen2.5-VL family averages (29.0% for 7B, 43.6% for 72B).