diff --git a/tailcfg/tailcfg.go b/tailcfg/tailcfg.go
index c8dcec297..0c521ce05 100644
--- a/tailcfg/tailcfg.go
+++ b/tailcfg/tailcfg.go
@@ -2231,6 +2231,9 @@ type Oauth2Token struct {
 
 	// NodeAttrDisableWebClient disables using the web client.
 	NodeAttrDisableWebClient NodeCapability = "disable-web-client"
+
+	// NodeAttrExitDstNetworkFlowLog enables exit node destinations in network flow logs.
+	NodeAttrExitDstNetworkFlowLog NodeCapability = "exit-dst-network-flow-log"
 )
 
 // SetDNSRequest is a request to add a DNS record.