diff --git a/tailcfg/tailcfg.go b/tailcfg/tailcfg.go
index a6e16a8c1..e3d2a5a2b 100644
--- a/tailcfg/tailcfg.go
+++ b/tailcfg/tailcfg.go
@@ -1474,6 +1474,8 @@ type Oauth2Token struct {
 
 	CapabilityFileSharing = "https://tailscale.com/cap/file-sharing"
 	CapabilityAdmin       = "https://tailscale.com/cap/is-admin"
+	CapabilitySSH         = "https://tailscale.com/cap/ssh"         // feature enabled/available
+	CapabilitySSHRuleIn   = "https://tailscale.com/cap/ssh-rule-in" // some SSH rule reach this node
 
 	// Inter-node capabilities.