Hey @arsalen_gharbi,
Can you try using the --cors ‘*’ flag without the --enable-api flag and let me know what the result it? I’m seeing that another user had success with this approach: RASA Core: --cors parameter does not apply to socket.io - #12 by Serge