I also recently setup vaultwarden and was wondering this.
Unfortunately I was unable to find a way to only expose the send function. The '/send/ path is preceded by a # making it part of the parameters instead of the uri path. Nginx in my case, sees all the requests for both the vault and the send feature coming from '/' '/app/' '/images/' and '/fonts/'.