Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsTo stop Goose from writing files without your approval, switch from the default Autonomous mode to Manual Approval or Smart Approval, then set the Developer extension’s write and edit tools to Ask before or Never allow. For an external filesystem MCP server, separately restrict the directories exposed by that server: Goose’s tool permissions, tool filtering, and MCP Roots are not documented as directory-level security boundaries.
Choose how Goose should handle actions
Goose documents four permission modes. The mode governs how actions are reviewed or whether tools are available at all; individual tool permissions provide more specific control in Manual Approval and Smart Approval.
As an Amazon Associate I earn from qualifying purchases.
| Mode | Approval behavior | When it fits |
|---|---|---|
Autonomous (auto) |
No approval required; documented as the default. | Use only when you are comfortable with Goose taking available actions without approval prompts. |
Manual Approval (approve) |
Review every action. | Choose this for action-by-action review. |
Smart Approval (smart_approve) |
Goose decides which actions need review. | Choose this when you want selective review rather than a prompt for every action. |
Chat Only (chat) |
Disables all tools. | Choose this when you want a conversation without tool actions. |
These mode names and behaviors come from Goose’s Developer Extension documentation. The reviewed pages do not identify a Goose release version, so confirm the labels against the version you have installed.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRequire approval for Goose’s built-in file tools
The Developer extension provides write, which creates or overwrites files, and edit, which replaces exact text. Goose marks both high risk and says they can modify any file accessible to Goose. In Manual Approval or Smart Approval, set each tool’s permission to Ask before to review its use, or Never allow to block that tool.
#1 Best Overall
- Switch to Manual Approval or Smart Approval. In the CLI, use
/mode; in Desktop, use the mode selector. - Open the Developer extension’s tool permissions and set
writeandeditto Ask before or Never allow, depending on whether you want prompts or a block. - Review
shellseparately. Goose documents it as a high-risk tool that can run system commands with your privileges; blockingwriteandeditalone does not remove every possible route to file changes ifshellremains available.
Per-tool permissions are documented for Manual Approval and Smart Approval. Do not rely on the default Autonomous mode to ask before writing files. Goose Developer Extension documentation
Restrict an external filesystem MCP server at the server
An MCP filesystem extension is distinct from Goose’s built-in Developer file tools. Configure the filesystem server itself to expose only the directories you intend it to access, and confirm its current path and security behavior in that server’s official documentation. The reviewed Goose documentation establishes that Goose supports MCP extensions and Roots for extensions that are roots-aware; it does not establish that Roots confines an extension to the session working directory.
Rank #2
Likewise, Goose’s available_tools setting limits which tools load from an extension. It is a tool-list filter, not documented directory-level filesystem enforcement. Do not treat either available_tools or MCP Roots as a substitute for configuring the server’s allowed paths.
Goose’s extension setup and configuration references are in its Using Extensions guide and Configuration Files guide. A third-party tutorial describes a general setup pattern for the filesystem server, but its exact flags and guarantees should not be relied on without checking current official server documentation: Super-Goose Filesystem Extension tutorial.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Apply changes and verify the active session
Goose lists these main configuration locations: ~/.config/goose/config.yaml on macOS and Linux, and %APPDATA%Blockgooseconfigconfig.yaml on Windows. The configuration guide also identifies permission.yaml for tool permission levels configured through goose configure, and permissions/tool_permissions.json for runtime permission decisions, which Goose manages automatically. Settings are also available in Desktop and CLI. Configuration Files
- Make the mode and tool-permission changes in Desktop, the CLI, or the appropriate configuration flow.
- If you edited configuration files directly, restart Goose or the affected session where needed; a direct edit may not change an already-running session.
- Run
goose info -vto inspect active settings, then confirm the effective permissions for the session you intend to use.
Goose documents goose info -v as an active-settings inspection command. Configuration Files
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
