I 🤔 think that u must provide some headers in your request headers body or maybe the API it's self uses cors to block unauthorised users to access it