Thanks. Wordfence works fine with the plugin, as do all server side security or cache plugins. But it might need a little tweaking in your case.
It is possible that the issue is related to IP geolocation or some other setting. The main thing to check is that the JSON API returns correct and recent data via your browser. All plugins can be configured to exclude requests with GET parameters from caching and/or blocking.
with regards