diff --git a/pkgs/clan-cli/clan_lib/ssh/host_key.py b/pkgs/clan-cli/clan_lib/ssh/host_key.py
index 34684c2c9..e6835448e 100644
--- a/pkgs/clan-cli/clan_lib/ssh/host_key.py
+++ b/pkgs/clan-cli/clan_lib/ssh/host_key.py
@@ -8,6 +8,7 @@ HostKeyCheck = Literal[
     "strict",  # Strictly check ssh host keys, prompt for unknown ones
     "ask",  # Ask for confirmation on first use
     "accept-new",  # Trust on ssh keys on first use
+    "tofu",  # Trust on ssh keys on first use
     "none",  # Do not check ssh host keys
 ]