diff --git a/docs/firmware.md b/docs/firmware.md
index c056e82..9bf5162 100644
--- a/docs/firmware.md
+++ b/docs/firmware.md
@@ -71,7 +71,7 @@ On a new Chameleon (or after a factory reset), 3 slots are defined, slot 1 holdi
 
 - slot 1 LF: a EM4100 with UID `DEADBEEF88`
 - slot 1 HF: a MIFARE Classic 1k with UID `DEADBEEF`
-- slot 2 HF: a MIFARE Classic 1k with UID `DEADBEEF`
+- slot 2 HF: a MIFARE Classic Ultralight  with UID `04689571FA5C64`
 - slot 3 LF: a EM4100 with UID `DEADBEEF88`
 
 When a slot is selected, the LED shows what type of card is loaded with the following color code:
diff --git a/docs/protocol.md b/docs/protocol.md
index 4afa1c4..2994173 100644
--- a/docs/protocol.md
+++ b/docs/protocol.md
@@ -432,6 +432,10 @@ Notes:
 * Command: no data
 * Response: 1 byte for the old value of the unsuccessful auth counter.
 * CLI: cf `hf mfu econfig --reset-auth-cnt`
+### 4030: MF0_NTAG_GET_PAGE_COUNT
+* Command: no data
+* Response: 1 byte is the number of pages available in the current card slot
+* CLI: unused
 ### 5000: EM410X_SET_EMU_ID
 * Command: 5 bytes. `id[5]`. ID as 5 bytes.
 * Response: no data