# `bird realtime apps keys revoke`

## Usage

```bash
bird realtime apps keys revoke <realtime-app-id> <realtime-app-key-id> [flags]
```

## Description

Revoke a key. It stops working immediately and every client still holding it fails, so revoke only after the replacement is rolled out. The record survives with `revoked_at` set rather than disappearing. Revoking a key twice is a conflict, and an app's last remaining key cannot be revoked at all.

This is destructive and cannot be undone; pass --yes to confirm.

## Procedure

Step 2 of 2 of "Rotate a Realtime app's keys with no downtime". Previous: bird realtime apps keys create.

## Examples

```bash
bird realtime apps keys revoke <realtime-app-id> <realtime-app-key-id> --yes
```

## Options

#### Safety

| Name                | Description                                                    |
| ------------------- | -------------------------------------------------------------- |
| `--idempotency-key` | Deduplication key; a retry with the same key won't act twice   |
| `--yes`             | Confirm a destructive action (required; the CLI never prompts) |

#### Options

| Name                | Description                                      |
| ------------------- | ------------------------------------------------ |
| `--response-schema` | Print the fields this command returns, then exit |

## Related

| Name                                                                              | Description                |
| --------------------------------------------------------------------------------- | -------------------------- |
| [`bird realtime apps keys create`](/docs/cli/reference/realtime-apps-keys-create) | Create a Realtime app key  |
| [`bird realtime apps keys list`](/docs/cli/reference/realtime-apps-keys-list)     | List a Realtime app's keys |