You can’t pass custom metadata like sessionId or authentication directly from the vapi widget/SDK to the MCP server, so the usual workaround is to route requests through a backend proxy that adds the headers before forwarding them..