invalid_actor

X-Actor names a server-assigned identity that is not the calling credential's own. Nothing was changed.

HTTP 400. Nothing reached the broker.

Likely cause: The value starts with api-key:, user: or firebase: but is not api-key: (or, for a signed-in user, your own firebase: id).

What to do: Send a free-text label (for example copier-7 or ops:jane), your own api-key:, or no X-Actor. The audit log always records the calling credential’s key_id separately.

Retry: No. The same request gets the same answer; change something first.

Listed under Keys, tokens and permissions in Errors. Send the error’s requestId to support and we can find the request.