PasserJack help

Connect Goose

Add PasserJack to Goose as a remote extension, from goose configure or from its config.yaml.

Signs in through your browser.

Before you start

A PasserJack account
Goose installed
The goose configure prompt, or access to Goose's config.yaml

Show the visual walkthrough

Goose, step by step

Step by step

Run goose configure, choose Add Extension, then Remote Extension (Streamable HTTP).
Give it the PasserJack MCP URL and skip the header. Goose then signs you in through your browser.
Approve access in the PasserJack window that opens.
Goose spells three things its own way: servers live under extensions, the address field is uri and not url, and the transport is streamable_http.

What to paste

extensions:
  passerjack:
    type: streamable_http
    name: passerjack
    enabled: true
    uri: https://passerjack.com/api/mcp
    timeout: 300

Use an API key instead

Open Agents and API keys, choose Goose, then expand Use an API key instead to create your key. These examples carry a placeholder.

Prefer a key? Open PasserJack, then Settings, then Agents and API keys, choose Goose, expand Use an API key instead, press Create a key and fill this in, and copy the block, then paste it into Goose's config.yaml.

extensions:
  passerjack:
    type: streamable_http
    name: passerjack
    enabled: true
    uri: https://passerjack.com/api/mcp
    headers:
      Authorization: Bearer pj_paste-your-key-here
    timeout: 300

Preview the PasserJack screens

The PasserJack Agents panel in Settings, with an agent selector and setup instructions for the selected client.

Open Agents and API keys and choose your agent. If you use an API key, each new key is shown exactly once.

The PasserJack consent screen, naming the app asking for access and the permissions it is asking for.

This is the screen a browser sign-in lands on. It names the app that is asking and the permissions it wants, and nothing is granted until you approve it. Read covers your whole ordinary Board, including your attachments. The default edit limit protects items the app did not create from changes; it does not hide them from reads.

Check it worked

Ask the agent: who am I connected as?

A correct answer names your account email, the key or app it is using (for example “Grok - Sep 10, 2026”), and its permissions: read, write if granted, and secrets only if you granted it. If it cannot answer, or names a different account, the connection is not made, so go back through the steps.

Granted write access? Ask it to save a short test note, then confirm that note appears on your board.

Vault reads need both secrets permission and an Unlock for agents window you explicitly open in Vault settings. That permission also includes text and extracted details from sensitive Board images without a Vault window. Review the permission and capture boundaries before granting it.

Manage or disconnect

Open PasserJack, then Settings, then Agents and API keys. That page lists your keys, the apps you have connected and your connector credentials, and you revoke any of them from there.

A revoked key stops working immediately. If a client reports an authentication error, check which account it is signed in to and whether its key was revoked before you create another.