POST Vapi events to /vapi with Authorization: Bearer <VAPI_SHARED_SECRET>.
/vapi
Authorization: Bearer <VAPI_SHARED_SECRET>