# `bird realtime apps keys create`

## Usage

```bash
bird realtime apps keys create <realtime-app-id> [flags]
```

## Description

Add a key to an app and read its secret. Takes no body. This response is the only place the secret appears, so a caller that does not capture it has to create another key. The app's existing keys keep working, which is what makes this the first step of a rotation: add, roll out, then revoke the old key.

## Procedure

Step 1 of 2 of "Rotate a Realtime app's keys with no downtime". Next: bird realtime apps keys revoke.

## Examples

```bash
bird realtime apps keys create <id>
```

## Options

| Name                | Description                                                  |
| ------------------- | ------------------------------------------------------------ |
| `--idempotency-key` | Deduplication key; a retry with the same key won't act twice |
| `--response-schema` | Print the fields this command returns, then exit             |

## Related

| Name                                                                              | Description                |
| --------------------------------------------------------------------------------- | -------------------------- |
| [`bird realtime apps keys list`](/docs/cli/reference/realtime-apps-keys-list)     | List a Realtime app's keys |
| [`bird realtime apps keys revoke`](/docs/cli/reference/realtime-apps-keys-revoke) | Revoke a Realtime app key  |