I think this might be due to the cloudflare protection.
They might work on browser but not on external clients which can't bypass the cloudflare thing.
We are under heavy DDOS load lately so we have had to keep Cloudflare protections on, but we'll remove them when things quiet down