WordFence Blocking REST API?

I have a blog and an aggregator is trying to access my posts using the WordPress API. While the endpoint URL works fine through a browser, whern their system makes the request nothing is returned and my suspicion is that WordFence is blocking something.

Having said that, I see nothing on the Live Traffic view from the IP addresses they have given me, which I have also whitelisted.

The endpoint is https://brummieroadender.com/wp-json/wp/v2/posts and the details of the aggregator set up are here: https://company.onefootball.com/campaigns/1903

Any idea as to what could be happening?