Dos Cloudflare Ddos protection block external API to call a webhook in my website?

After setting my DNS for my website to cloudflare and activated Ddos attack protection. it seems that I’m not longer able to receive data from third party API.
is that because of the redirection happening in the first load?

please help how to keep the firwall protection and keep API working too.

thanks