My gut feeling is the user authenticating via REST doesn’t have permission (roles?) to access more.
Without details, it’s hard to help. Next thing you can try is to connect the debugger and step through your REST action microflow: https://docs.mendix.com/howto/monitoring-troubleshooting/debug-microflows-remotely