Hi. I think you can use tag__in but requires authentication. You can take a look at the documentation below where it says which filtering params you can use with and without authenticating.
http://wp-api.org/index-deprecated.html#posts_retrieve-posts
I think it may be something along the lines of,
?filter[tag__in]=123
