As an example flow, you would register a user's unique secret with the service. Then, the service's client-side library would redirect all of the OpenAI requests to itself, and would also pass the unique user secret. If the corresponding user has no funding for the AI request, it would deny it.
Any interest?