Goose

Goose is a general-purpose AI agent that runs locally, built in Rust and distributed as a native desktop app for macOS, Linux and Windows plus a CLI for terminal workflows. It connects to more than 70 MCP extensions, configured under extensions in ~/.config/goose/config.yaml, each entry either a stdio command or a streamable_http endpoint. Block donated the project to the Agentic AI Foundation (AAIF) at the Linux Foundation on 2026-04-07, alongside MCP itself, A2A, and AGENTS.md; its GitHub repository moved from block/goose to aaif-goose/goose, and the old block/goose path now returns the identical repository record at the GitHub API level.

Goose's MCP client code implements all six client-facing features tracked by the official clients matrix. extension_manager.rs implements list_tools/call_tool, list_resources/read_resource, and list_prompts/get_prompt; mcp_client.rs enables sampling and elicitation, implementing create_message and create_elicitation handlers, and enables roots, implementing list_roots and covered by a unit test named test_client_capabilities_advertise_roots. Goose also runs its own bundled MCP servers: the goose mcp <name> CLI subcommand serves built-in tools such as computercontroller, memory, and tutorial over stdio for other MCP clients to consume.

No vendor statement names a protocol revision that Goose itself supports. Goose 1.50.0 briefly changed the default MCP lifecycle to prefer 2026-07-28 via server/discover, and Goose 1.50.1 reverted that change on 2026-09-14, restoring the legacy initialize handshake at protocol version 2025-11-25 as the default; a default negotiation path is not itself a support claim for the current spec, so spec_status is recorded as unknown. A single security advisory has been published against the project, GHSA-r5pp-p5r8-466r (CVE-2026-72718, high severity, patched in 1.44.0), covering a git core.fsmonitor command-injection flaw in the goose review CLI command, unrelated to MCP.