diff --git a/build/bazelutil/check.sh b/build/bazelutil/check.sh
index 6a957e354872..cec2570b0735 100755
--- a/build/bazelutil/check.sh
+++ b/build/bazelutil/check.sh
@@ -10,6 +10,7 @@ CONFIGS="-c grep.column=false -c grep.lineNumber=false -c grep.fullName=false"
 GIT_GREP="git $CONFIGS grep"
 
 EXISTING_GO_GENERATE_COMMENTS="
+pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/capabilities.go://go:generate stringer -type=TenantCapabilityName -linecomment
 pkg/roachprod/vm/aws/config.go://go:generate go-bindata -mode 0600 -modtime 1400000000 -pkg aws -o embedded.go config.json old.json
 pkg/roachprod/vm/aws/config.go://go:generate gofmt -s -w embedded.go
 pkg/roachprod/vm/aws/config.go://go:generate goimports -w embedded.go
diff --git a/pkg/gen/stringer.bzl b/pkg/gen/stringer.bzl
index 4d89f66af5a9..ca042ac04d67 100644
--- a/pkg/gen/stringer.bzl
+++ b/pkg/gen/stringer.bzl
@@ -11,6 +11,7 @@ STRINGER_SRCS = [
     "//pkg/kv/kvpb:method_string.go",
     "//pkg/kv/kvserver/closedts/sidetransport:cantclosereason_string.go",
     "//pkg/kv/kvserver:refreshraftreason_string.go",
+    "//pkg/multitenant/tenantcapabilities/tenantcapabilitiespb:tenantcapabilityname_string.go",
     "//pkg/sql/catalog/catalogkeys:commenttype_string.go",
     "//pkg/sql/catalog/catpb:privilegedescversion_string.go",
     "//pkg/sql/catalog/descpb:formatversion_string.go",
diff --git a/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/BUILD.bazel b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/BUILD.bazel
index a4ece3c91cfe..9a479e2dd4cd 100644
--- a/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/BUILD.bazel
+++ b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/BUILD.bazel
@@ -2,6 +2,7 @@ load("//build/bazelutil/unused_checker:unused.bzl", "get_x_data")
 load("@rules_proto//proto:defs.bzl", "proto_library")
 load("@io_bazel_rules_go//go:def.bzl", "go_library")
 load("@io_bazel_rules_go//proto:def.bzl", "go_proto_library")
+load("//build:STRINGER.bzl", "stringer")
 
 proto_library(
     name = "tenantcapabilitiespb_proto",
@@ -22,10 +23,21 @@ go_proto_library(
 
 go_library(
     name = "tenantcapabilitiespb",
-    srcs = ["capabilities.go"],
+    srcs = [
+        "capabilities.go",
+        ":tenantcapabilityname-stringer",  # keep
+    ],
     embed = [":tenantcapabilitiespb_go_proto"],
     importpath = "github.com/cockroachdb/cockroach/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb",
     visibility = ["//visibility:public"],
+    deps = ["@com_github_cockroachdb_errors//:errors"],
+)
+
+stringer(
+    name = "tenantcapabilityname-stringer",
+    src = "capabilities.go",
+    additional_args = ["--linecomment"],
+    typ = "TenantCapabilityName",
 )
 
 get_x_data(name = "get_x_data")
diff --git a/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/capabilities.go b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/capabilities.go
index afaf7ee7d317..29c2552ac1d7 100644
--- a/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/capabilities.go
+++ b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/capabilities.go
@@ -10,19 +10,56 @@
 
 package tenantcapabilitiespb
 
+import "github.com/cockroachdb/errors"
+
+// TenantCapabilityName is a pseudo-enum of valid capability names.
+type TenantCapabilityName int32
+
+// valueOffset sets the iota offset to make sure the 0 value is not a valid
+// enum value.
+const valueOffset = 1
+
+// IsSet returns true if the capability name has a non-zero value.
+func (t TenantCapabilityName) IsSet() bool {
+	return t >= valueOffset
+}
+
+var stringToTenantCapabilityName = func() map[string]TenantCapabilityName {
+	numCapabilities := len(_TenantCapabilityName_index) - 1
+	m := make(map[string]TenantCapabilityName, numCapabilities)
+	for i := 0; i < numCapabilities; i++ {
+		startIndex := _TenantCapabilityName_index[i]
+		endIndex := _TenantCapabilityName_index[i+1]
+		s := _TenantCapabilityName_name[startIndex:endIndex]
+		m[s] = TenantCapabilityName(i + valueOffset)
+	}
+	return m
+}()
+
+// TenantCapabilityNameFromString converts a string to a TenantCapabilityName
+// or returns an error if no conversion is possible.
+func TenantCapabilityNameFromString(s string) (TenantCapabilityName, error) {
+	tenantCapabilityName, ok := stringToTenantCapabilityName[s]
+	if !ok {
+		return 0, errors.Newf("unknown capability: %q", s)
+	}
+	return tenantCapabilityName, nil
+}
+
+//go:generate stringer -type=TenantCapabilityName -linecomment
 const (
 	// CanAdminSplit if set to true, grants the tenant the ability to
 	// successfully perform `AdminSplit` requests.
-	CanAdminSplit = "can_admin_split"
+	CanAdminSplit TenantCapabilityName = iota + valueOffset // can_admin_split
 	// CanViewNodeInfo if set to true, grants the tenant the ability
 	// retrieve node-level observability data at endpoints such as `_status/nodes`
 	// and in the DB Console overview page.
-	CanViewNodeInfo = "can_view_node_info"
+	CanViewNodeInfo // can_view_node_info
 	// CanViewTSDBMetrics if set to true, grants the tenant the ability to
 	// make arbitrary queries of the TSDB of the entire cluster. Currently,
 	// we do not store per-tenant metrics so this will surface system metrics
 	// to the tenant.
 	// TODO(davidh): Revise this once tenant-scoped metrics are implemented in
 	// https://github.com/cockroachdb/cockroach/issues/96438
-	CanViewTSDBMetrics = "can_view_tsdb_metrics"
+	CanViewTSDBMetrics // can_view_tsdb_metrics
 )
diff --git a/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/tenantcapabilityname_string.go b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/tenantcapabilityname_string.go
new file mode 100644
index 000000000000..fa864c8fc8dd
--- /dev/null
+++ b/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb/tenantcapabilityname_string.go
@@ -0,0 +1,26 @@
+// Code generated by "stringer"; DO NOT EDIT.
+
+package tenantcapabilitiespb
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[CanAdminSplit-1]
+	_ = x[CanViewNodeInfo-2]
+	_ = x[CanViewTSDBMetrics-3]
+}
+
+const _TenantCapabilityName_name = "can_admin_splitcan_view_node_infocan_view_tsdb_metrics"
+
+var _TenantCapabilityName_index = [...]uint8{0, 15, 33, 54}
+
+func (i TenantCapabilityName) String() string {
+	i -= 1
+	if i < 0 || i >= TenantCapabilityName(len(_TenantCapabilityName_index)-1) {
+		return "TenantCapabilityName(" + strconv.FormatInt(int64(i+1), 10) + ")"
+	}
+	return _TenantCapabilityName_name[_TenantCapabilityName_index[i]:_TenantCapabilityName_index[i+1]]
+}
diff --git a/pkg/sql/multitenant_admin_function_test.go b/pkg/sql/multitenant_admin_function_test.go
index 652ec27ef096..e9213f653e28 100644
--- a/pkg/sql/multitenant_admin_function_test.go
+++ b/pkg/sql/multitenant_admin_function_test.go
@@ -58,8 +58,8 @@ type testClusterCfg struct {
 	numNodes            int
 	setupClusterSetting *settings.BoolSetting
 	queryClusterSetting *settings.BoolSetting
-	setupCapability     string
-	queryCapability     string
+	setupCapability     tenantcapabilitiespb.TenantCapabilityName
+	queryCapability     tenantcapabilitiespb.TenantCapabilityName
 }
 
 func createTestClusterArgs(numReplicas, numVoters int32) base.TestClusterArgs {
@@ -242,9 +242,9 @@ type testCase struct {
 	queryClusterSetting *settings.BoolSetting
 	// Used for tests that have a capability prereq
 	// (eq SPLIT AT is required for UNSPLIT AT).
-	setupCapability string
+	setupCapability tenantcapabilitiespb.TenantCapabilityName
 	// Capability required for secondary tenant query.
-	queryCapability string
+	queryCapability tenantcapabilitiespb.TenantCapabilityName
 }
 
 func (tc testCase) runTest(
@@ -308,12 +308,12 @@ func (tc testCase) runTest(
 	var waitForTenantCapabilitiesFns []func()
 	setCapabilities := func(
 		tenantID roachpb.TenantID,
-		capabilities ...string,
+		capabilities ...tenantcapabilitiespb.TenantCapabilityName,
 	) {
 		// Filter out empty capabilities.
-		var caps []string
+		var caps []tenantcapabilitiespb.TenantCapabilityName
 		for _, capability := range capabilities {
-			if capability != "" {
+			if capability.IsSet() {
 				caps = append(caps, capability)
 			}
 		}
@@ -324,7 +324,7 @@ func (tc testCase) runTest(
 				if i > 0 {
 					builder.WriteString(", ")
 				}
-				builder.WriteString(capability)
+				builder.WriteString(capability.String())
 			}
 			query := fmt.Sprintf("ALTER TENANT [$1] GRANT CAPABILITY %s", builder.String())
 			_, err := systemDB.ExecContext(ctx, query, tenantID.ToUint64())
diff --git a/pkg/sql/show_tenant.go b/pkg/sql/show_tenant.go
index 8e714ccb7727..a54b046fc17b 100644
--- a/pkg/sql/show_tenant.go
+++ b/pkg/sql/show_tenant.go
@@ -36,7 +36,7 @@ type tenantValues struct {
 }
 
 type showTenantNodeCapability struct {
-	name  string
+	name  tenantcapabilitiespb.TenantCapabilityName
 	value string
 }
 
@@ -266,7 +266,7 @@ func (n *showTenantNode) Values() tree.Datums {
 	if n.withCapabilities {
 		capability := n.capability
 		result = append(result,
-			tree.NewDString(capability.name),
+			tree.NewDString(capability.name.String()),
 			tree.NewDString(capability.value),
 		)
 	}
diff --git a/pkg/sql/tenant_capability.go b/pkg/sql/tenant_capability.go
index 52ee36c44dd1..c39f4a639bd1 100644
--- a/pkg/sql/tenant_capability.go
+++ b/pkg/sql/tenant_capability.go
@@ -23,7 +23,7 @@ import (
 	"github.com/cockroachdb/errors"
 )
 
-var capabilityTypes = map[string]*types.T{
+var capabilityTypes = map[tenantcapabilitiespb.TenantCapabilityName]*types.T{
 	tenantcapabilitiespb.CanAdminSplit:      types.Bool,
 	tenantcapabilitiespb.CanViewNodeInfo:    types.Bool,
 	tenantcapabilitiespb.CanViewTSDBMetrics: types.Bool,
@@ -55,7 +55,10 @@ func (p *planner) AlterTenantCapability(
 
 	exprs := make([]tree.TypedExpr, len(n.Capabilities))
 	for i, capability := range n.Capabilities {
-		capabilityName := capability.Name
+		capabilityName, err := tenantcapabilitiespb.TenantCapabilityNameFromString(capability.Name)
+		if err != nil {
+			return nil, err
+		}
 		desiredType, ok := capabilityTypes[capabilityName]
 		if !ok {
 			return nil, pgerror.Newf(pgcode.Syntax, "unknown capability: %q", capabilityName)
@@ -75,7 +78,14 @@ func (p *planner) AlterTenantCapability(
 		if capabilityValue != nil {
 			var dummyHelper tree.IndexedVarHelper
 			typedValue, err := p.analyzeExpr(
-				ctx, capabilityValue, nil, dummyHelper, desiredType, true /* requireType */, fmt.Sprintf("%s %s", alterTenantCapabilityOp, capability.Name))
+				ctx,
+				capabilityValue,
+				nil, /* source */
+				dummyHelper,
+				desiredType,
+				true, /* requireType */
+				fmt.Sprintf("%s %s", alterTenantCapabilityOp, capabilityName),
+			)
 			if err != nil {
 				return nil, err
 			}
@@ -117,7 +127,10 @@ func (n *alterTenantCapabilityNode) startExec(params runParams) error {
 
 	dst := &tenantInfo.Capabilities
 	for i, capability := range n.n.Capabilities {
-		capabilityName := capability.Name
+		capabilityName, err := tenantcapabilitiespb.TenantCapabilityNameFromString(capability.Name)
+		if err != nil {
+			return err
+		}
 		typedExpr := n.typedExprs[i]
 		switch capabilityName {
 		case tenantcapabilitiespb.CanAdminSplit:
@@ -126,7 +139,7 @@ func (n *alterTenantCapabilityNode) startExec(params runParams) error {
 			} else {
 				b := true
 				if typedExpr != nil {
-					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName, typedExpr)
+					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName.String(), typedExpr)
 					if err != nil {
 						return err
 					}
@@ -140,7 +153,7 @@ func (n *alterTenantCapabilityNode) startExec(params runParams) error {
 			} else {
 				b := true
 				if typedExpr != nil {
-					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName, typedExpr)
+					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName.String(), typedExpr)
 					if err != nil {
 						return err
 					}
@@ -154,7 +167,7 @@ func (n *alterTenantCapabilityNode) startExec(params runParams) error {
 			} else {
 				b := true
 				if typedExpr != nil {
-					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName, typedExpr)
+					b, err = paramparse.DatumAsBool(ctx, p.EvalContext(), capabilityName.String(), typedExpr)
 					if err != nil {
 						return err
 					}
diff --git a/pkg/testutils/serverutils/BUILD.bazel b/pkg/testutils/serverutils/BUILD.bazel
index 832eced46133..187805ce974e 100644
--- a/pkg/testutils/serverutils/BUILD.bazel
+++ b/pkg/testutils/serverutils/BUILD.bazel
@@ -17,6 +17,7 @@ go_library(
         "//pkg/keys",
         "//pkg/kv",
         "//pkg/kv/kvserver/liveness/livenesspb",
+        "//pkg/multitenant/tenantcapabilities/tenantcapabilitiespb",
         "//pkg/roachpb",
         "//pkg/rpc",
         "//pkg/security",
diff --git a/pkg/testutils/serverutils/test_cluster_shim.go b/pkg/testutils/serverutils/test_cluster_shim.go
index f3bfde837560..bba88e430f78 100644
--- a/pkg/testutils/serverutils/test_cluster_shim.go
+++ b/pkg/testutils/serverutils/test_cluster_shim.go
@@ -23,6 +23,7 @@ import (
 	"testing"
 
 	"github.com/cockroachdb/cockroach/pkg/base"
+	"github.com/cockroachdb/cockroach/pkg/multitenant/tenantcapabilities/tenantcapabilitiespb"
 	"github.com/cockroachdb/cockroach/pkg/roachpb"
 	"github.com/cockroachdb/cockroach/pkg/sql/catalog"
 	"github.com/cockroachdb/cockroach/pkg/util/hlc"
@@ -235,7 +236,7 @@ type TestClusterInterface interface {
 	// tenant capabilities for the specified tenant ID.
 	// Only boolean capabilities are currently supported as we wait for the
 	// specified capabilities to have a "true" value.
-	WaitForTenantCapabilities(*testing.T, roachpb.TenantID, ...string)
+	WaitForTenantCapabilities(*testing.T, roachpb.TenantID, ...tenantcapabilitiespb.TenantCapabilityName)
 }
 
 // SplitPoint describes a split point that is passed to SplitTable.
diff --git a/pkg/testutils/testcluster/testcluster.go b/pkg/testutils/testcluster/testcluster.go
index d392587a8a0f..3845d2039b2a 100644
--- a/pkg/testutils/testcluster/testcluster.go
+++ b/pkg/testutils/testcluster/testcluster.go
@@ -1778,7 +1778,9 @@ func (tc *TestCluster) SplitTable(
 
 // WaitForTenantCapabilities implements TestClusterInterface.
 func (tc *TestCluster) WaitForTenantCapabilities(
-	t *testing.T, tenID roachpb.TenantID, capabilityNames ...string,
+	t *testing.T,
+	tenID roachpb.TenantID,
+	capabilityNames ...tenantcapabilitiespb.TenantCapabilityName,
 ) {
 	for i, ts := range tc.Servers {
 		testutils.SucceedsSoon(t, func() error {
@@ -1787,7 +1789,7 @@ func (tc *TestCluster) WaitForTenantCapabilities(
 			}
 
 			if len(capabilityNames) > 0 {
-				missingCapabilityError := func(capabilityName string) error {
+				missingCapabilityError := func(capabilityName tenantcapabilitiespb.TenantCapabilityName) error {
 					return errors.Newf("server=%d tenant %s does not have capability %q", i, tenID, capabilityName)
 				}
 				capabilities, found := ts.Server.TenantCapabilitiesReader().GetCapabilities(tenID)