diff --git a/go/apps/ctrl/config.go b/go/apps/ctrl/config.go
index 0483abad82..253cb668b9 100644
--- a/go/apps/ctrl/config.go
+++ b/go/apps/ctrl/config.go
@@ -39,6 +39,12 @@ type Config struct {
 	// AuthToken is the authentication token for control plane API access
 	AuthToken string
 
+	// MetaldAddress is the full URL of the metald service for VM operations (e.g., "https://metald.example.com:8080")
+	MetaldAddress string
+
+	// SPIFFESocketPath is the path to the SPIFFE agent socket for mTLS authentication
+	SPIFFESocketPath string
+
 	Clock clock.Clock
 }