diff --git a/app-crypt/mit-krb5/metadata.xml b/app-crypt/mit-krb5/metadata.xml
new file mode 100644
--- /dev/null
+++ b/app-crypt/mit-krb5/metadata.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<herd>kerberos</herd>
+<longdescription>Kerberos 5 reference implementation from MIT</longdescription>
+<use>
+  <flag name="krb4">
+    This option enables Kerberos V4 backwards compatibility using the
+    builtin Kerberos V4 library. This is really outdated and dangerous
+    to use because not safe.
+  </flag>
+  <flag name="doc">
+    Creates and installs the API and implementation
+    documentation. This is only useful if you want to develop software
+    which depends on kerberos.
+  </flag>
+  <flag name="tcl">
+    Some of the unit-tests in the build tree rely upon using a program
+    in Tcl. This flag is marked for removal.
+  </flag>
+  <flag name="ipv6">
+    Enables ipv6 support which is default in actual releases. This
+    flag is marked for removal.
+  </flag>
+  <flag name="ldap">
+    Enables ldap backend support in krb5.
+  </flag>
+</use>
+</pkgmetadata>