Vapi

Documented custom tool support and prebuilt action tools. Function tools call the customer's server logic and API Request tools call any HTTPS API directly, with credentials held by reference; MCP tools connect an assistant to external MCP servers at runtime; built in tools transfer calls, end calls, send SMS and press DTMF keys; prebuilt integrations include Google Calendar event creation, Make and n8n. Deepgram, OpenAI and other providers are model layers, not integrations.

SourceVapi, docs.vapi.ai (Function tools, Integrations, Built-in tools)read 2026-09-27

Multi agent routing the buyer configures. Squads split a call across specialized assistants that hand off through handoff tools with declared destinations, resolved at runtime, with configurable context passing, variable extraction and rejection rules; the squad examples route by verification and inquiry type. Vapi's older Workflows builder was retired on 18 August 2026 and migrated to Squads.

SourceVapi, docs.vapi.ai (Introduction to Squads, Handoff tool, Workflows migration guide)read 2026-09-27

A maintained store over the customer's documents. Knowledge bases are the customer's uploaded files (txt, pdf, docx, csv, md and more, through the dashboard or the file API) kept in Vapi and attached to assistants; the query tool searches them by file ID during a call, with Google Gemini models doing the retrieval, and new knowledge is added by uploading a file, not retraining. A custom knowledge base can swap in the customer's own retrieval server.

SourceVapi, docs.vapi.ai (Knowledge bases, Query tool)read 2026-09-27

Configurable constraints and escalation, no approval step. A tool rejection plan attaches conditions to any tool and blocks the call when the recent conversation state matches them; handoff rejection rules block unwanted transfers between assistants; transfer tools hand a caller to a person by blind or warm transfer. Escalation hands the conversation over rather than holding an action for sign off.

SourceVapi, docs.vapi.ai (Tool rejection plan, Transfer Call tool)read 2026-09-27

Access and compliance are both documented. For access, Vapi supports SSO through any SAML 2.0 or OIDC identity provider (Enterprise or Premier) and RBAC with Admin, Editor and Viewer roles assigned per member, and states that SCIM is not supported. On compliance, Vapi's SafeBase trust center announces a completed SOC 2 Type II examination for 1 July 2025 to 31 July 2026 (report under NDA) and a public SOC 3, and lists HIPAA, PCI DSS v4.0.1, GDPR and CCPA; HIPAA mode and zero data retention are organization settings.

SourceVapi, docs.vapi.ai (Single Sign-On) and security.vapi.airead 2026-09-27

Run level records of what each agent did. Call logs hold the transcript, messages, analysis, costs, latency, recordings and downloadable pipeline logs per call, with chat, session, webhook and API request logs beside them; monitors evaluate call data against thresholds and open issues; raw data retention runs 14 to 180 days by package.

SourceVapi, docs.vapi.ai (Call logs, Logs overview, Monitoring quickstart) and vapi.ai/pricingread 2026-09-27

Session state with a stated lifetime, short of a memory layer. For chat and SMS, a sessionId groups chats under one persisted conversation that expires 24 hours after creation by default (expirationSeconds), is readable in session logs and can be deleted through the API; within a call, squads carry context across handoffs. Nothing persists what the agent learned about a caller beyond the session; this is conversation state inside one session.

SourceVapi, docs.vapi.ai (Session management, Session logs)read 2026-09-27

Named regions offered as an option. Each organization belongs to the United States or the European Union region, with its own dashboard, API and SIP hosts (api.eu.vapi.ai, sip.eu.vapi.ai), every resource kept in region and each region an isolated environment; the service is hosted only, with no self hosted or customer tenant option documented.

SourceVapi, docs.vapi.ai (EU region and data residency)read 2026-09-27

Worked examples the customer assembles. The Guides page offers cloneable builds for appointment scheduling, medical triage and scheduling, ecommerce order management, property management routing, lead qualification and multilingual support, each a different job, but each built step by step by the customer rather than adopted as a packaged agent; Model Intelligence presets are settings.

SourceVapi, docs.vapi.ai (Guides)read 2026-09-27

Work can begin without a person starting it, and agents answer across many channels. Outbound campaigns carry a schedulePlan with an earliest and latest dispatch time, so Vapi starts dialing a contact list on its own schedule, with pre dial webhooks; assistant hooks run actions on call events. Agents also answer on Vapi, Twilio, Telnyx and SIP numbers, in web calls, and over SMS chat.

SourceVapi, docs.vapi.ai (Campaign scheduling and lifecycle, Assistant hooks, SIP introduction, SMS chat)read 2026-09-27

The customer chooses every model. Each assistant's transcriber, model and voice can be swapped for any supported provider, with the customer's own provider keys, Azure OpenAI and Bedrock credentials, or the customer's own server acting as the LLM; transcriber and voice fallback plans switch providers automatically on failure.

SourceVapi, docs.vapi.ai (Core Models, Provider Keys, Custom LLM, fallback configuration)read 2026-09-27

A documented API and SDKs for Vapi's own platform. The API reference covers assistants, squads, calls, chats, campaigns, sessions and phone numbers; server SDKs, a Web SDK and a CLI sit beside it; and the Vapi MCP Server at mcp.vapi.ai, authenticated by bearer token, manages assistants, phone numbers and calls from any MCP client.

SourceVapi, docs.vapi.ai (API reference, Vapi MCP Server)read 2026-09-27

An evaluation harness on the customer's own agents. Evals test assistants and squads with mock conversations, exact, regex or AI judged checks and tool call checks, returning pass or fail; Simulations run full conversations against AI testers with success criteria and tool mocks; the testing guides set a release and regression cadence.

SourceVapi, docs.vapi.ai (Evals quickstart, Simulations overview, Run and maintain tests)read 2026-09-27

Vapi documents no browser, desktop or computer control. IVR navigation presses DTMF keys to walk a phone menu, which is a telephone keypad rather than a screen; Web SDK client side tools trigger side effects in the customer's own web app, which is the product running in a browser.

SourceVapi, docs.vapi.ai (llms.txt, IVR Navigation, Client-side tools)read 2026-09-27