diff --git a/mkdocs/docs/getting-started/tailnet.md b/mkdocs/docs/getting-started/tailnet.md
index 40ff4244..4a3d9527 100644
--- a/mkdocs/docs/getting-started/tailnet.md
+++ b/mkdocs/docs/getting-started/tailnet.md
@@ -111,7 +111,7 @@ To create an auth key:
 ionscale auth-key create --tailnet "my-first-tailnet"
 
 # Create an auth key with specific tags
-ionscale auth-key create --tailnet "my-first-tailnet" --tags "tag:server"
+ionscale auth-key create --tailnet "my-first-tailnet" --tag "tag:server"
 ```
 
 The tags assigned to the key will determine what network access the device has once connected, based on your ACL rules.
@@ -151,4 +151,4 @@ ionscale tailnet create --name "tailnet-c"
 ```
 
 !!! note
-    Each tailnet is a separate network with its own devices, ACLs, and IAM policies. Devices in different tailnets cannot communicate with each other by default.
\ No newline at end of file
+    Each tailnet is a separate network with its own devices, ACLs, and IAM policies. Devices in different tailnets cannot communicate with each other by default.