Deleting and restoring

Deleting a Project, repository, Service, or database stops it now but gives you 30 days to recover it. After 30 days, Tokay permanently removes it. Recently Deleted protects against deleting the wrong thing and against discovering a dependency after the deletion.

Last updated

AI agent? Start with llms.txt.

Deletion takes effect immediately

A deleted web app stops serving, a deleted scheduled job stops running, and a deleted database is no longer available to Services. Delete is an operational stop, not a delayed request.

Tokay keeps the code, configuration, data, and history needed for restoration during the 30-day recovery window.

Restoring brings back what the deletion took

Recently Deleted lists deleted items and their recovery deadline. Restoring an item puts it back in its previous location.

Restoring a Project also brings back the Services and databases its deletion moved to Recently Deleted. Restoring code brings back the Services that its deletion moved there. A Service or database you deleted on its own before that stays in Recently Deleted until you restore it too.

A Service or database inside a deleted Project needs its Project restored first, and a Service also needs its code. A restored database runs again right away. A restored Service comes back paused, with its configuration and history, and runs again when you deploy it.

Restoring needs permission to change the item. When you lack it, Tokay names the permission to ask for.

Deletion follows product boundaries

  • Deleting a Service stops that running workload. Its repository stays because other Services may use it.
  • Deleting code removes the repository and the Services that use it. Tokay shows which Services depend on it before confirmation.
  • Deleting a Project removes the Project and everything it contains, including databases.
  • A database can be deleted only after you disconnect every Service that uses it.

Permanent deletion has no recovery path

You can permanently delete an item from Recently Deleted before 30 days. Tokay asks for explicit confirmation because the code or data cannot be restored afterward.

Credentials are different. Revoking an SSH key, git token, or Machine credential is permanent because a revoked credential must not be recoverable. When you revoke a Machine credential, Tokay Access sends the change to deployed apps. Machines and credentials explains the propagation window.