Skip to main content

​
Quick Install

zenable install goose
See the CLI command reference for more options.
That’s it! You’re all set. Start using Zenable’s conformance checking in Goose. Goose is an open-source AI agent (CLI + desktop), an Agentic AI Foundation (AAIF) project. zenable install goose installs both the MCP server (in your Goose config.yaml) and a managed Open-Plugin-Spec plugin that runs Zenable’s conformance checks throughout your coding session.
The below is a minimal example. Consider using the quick install command to handle this automatically.
Goose stores MCP servers under the top-level extensions key, using type: streamable_http for streamable-HTTP servers. Goose’s MCP config is global. See Goose’s extensions docs for the full schema.Place the following in ~/.config/goose/config.yaml:
extensions:
  zenable:
    type: streamable_http
    name: zenable
    uri: https://mcp.zenable.app/
    description: Zenable governance, guardrails, and conformance checks
    enabled: true
Goose requires name and description on a streamable_http extension — without them Goose silently skips the entry.
We only recommend this manual approach if you can’t use zenable install. Otherwise, zenable install is much safer and can handle configuration upgrades over time, handles merges with existing configs, performs backups and logging in case of issues, and more.
Goose’s documented hooks surface is the Open-Plugin-Spec plugin format. zenable install goose writes a managed plugin (at ~/.agents/plugins/zenable/hooks/hooks.json, with a .plugin/plugin.json manifest) that integrates Zenable’s governance, guardrails, and observability across your coding sessions. The plugin can live globally (~/.agents/plugins/) or project-scoped (<repo>/.agents/plugins/).The plugin subscribes to the UserPromptSubmit, PreToolUse, PostToolUse, and Stop events — checkpointing your work as you go and running a Zenable conformance review when the agent finishes a turn. On the Stop event, Zenable returns a blocking decision so Goose feeds any findings back to the agent (so it can fix them) instead of ending the turn.
Hooks require Goose v1.37.0 or newer — that’s the release that honors blocking Stop hook decisions. On older Goose the review still runs but its findings are silently dropped, so zenable install goose enforces this minimum.
The plugin file is fully managed — every zenable install / zenable sync rewrites it. If you want to add your own Goose plugins, drop a separate plugin alongside it under ~/.agents/plugins/.