Protect website against bot, but exclude APIs path

My webite expose APIs under the path /api/rest
I would like to enable anti bot challenge, with the slide, except for the URL like https://website_domain/api/rest/*
Is it possibile to exclude /api/rest/* from the anti bot filter? If i enable the filter on the whole application, the server to server integrations via API will stop working.
Can i apply the anti bot filter only to specific URLs?

you can try this in Custom Rules

Target: URL Path
Operator: Regex Match
Content: ^(?!\/api\/rest)\/.*