How to re-enable API access?

After installing Wordfence, I have been blocked from making legitimate, authenticated calls to the site’s REST API.

// date
// https://site.com/wp-json/wp/v2/posts/postid

{
"code": "rest_forbidden",
"message": "Sorry, you are not allowed to do that.",
"data": {
"status": 401
}
}

This call was previously being sent successfully with an “Authorization Basic key” header.

/posts without the id still works.

If I disable Wordfence, it can work again.

I cannot find any relevant Wordfence setting.

Please, how can I configure Wordfence such that valid, authenticated API queries of all kinds can be permitted?