diff --git a/system_files/shared/usr/share/ublue-os/goose/config.yaml b/system_files/shared/usr/share/ublue-os/goose/config.yaml
new file mode 100644
index 00000000..518d9085
--- /dev/null
+++ b/system_files/shared/usr/share/ublue-os/goose/config.yaml
@@ -0,0 +1,11 @@
+# Bluefin default Goose configuration.
+extensions:
+  linux-mcp-server:
+    args: []
+    bundled: false
+    cmd: linux-mcp-server
+    enabled: true
+    envs: {}
+    name: linux-mcp-server
+    timeout: 300
+    type: stdio
diff --git a/system_files/shared/usr/share/ublue-os/just/apps.just b/system_files/shared/usr/share/ublue-os/just/apps.just
index 7ca0cb8e..096893e9 100644
--- a/system_files/shared/usr/share/ublue-os/just/apps.just
+++ b/system_files/shared/usr/share/ublue-os/just/apps.just
@@ -54,6 +54,27 @@ cncf:
     brew bundle --file=/usr/share/ublue-os/homebrew/cncf.Brewfile
     [[ -t 0 ]] && ujust --choose || true
 
+# Install Goose and configure the read-only Linux diagnostics MCP server.
+[group('Apps')]
+install-ai-tools:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    brew bundle --file=/usr/share/ublue-os/homebrew/ai-tools.Brewfile
+
+    CONFIG_DIR="${XDG_CONFIG_HOME:-${HOME}/.config}/goose"
+    CONFIG_FILE="${CONFIG_DIR}/config.yaml"
+    TEMPLATE="/usr/share/ublue-os/goose/config.yaml"
+    mkdir -p "${CONFIG_DIR}"
+
+    if [[ -e "${CONFIG_FILE}" ]]; then
+        echo "Goose config already exists: ${CONFIG_FILE}"
+        echo "Review ${TEMPLATE} and merge its linux-mcp-server extension if needed."
+        exit 0
+    fi
+
+    install -m0644 "${TEMPLATE}" "${CONFIG_FILE}"
+    echo "Goose configured with read-only Linux diagnostics."
+
 # Install ASUS laptop tools (asusctl daemon + ROG Control Center) | https://gitlab.com/asus-linux/asusctl
 [group('Apps')]
 install-asus: