Member Portal — membership middleware for the Inference Cooperative

Reconciles three systems into one membership lifecycle:

System	Role	Source of truth for
Open Collective	Billing	Who is a paying member
Cloudron	Identity/SSO	Who can log in
LiteLLM	Inference	Who can use models, and how much

Architecture

Open Collective (billing)
        │ webhook
        ▼
┌─────────────────────────────┐
│  Member Portal (this app)   │
│  - OC webhook handler       │
│  - Cloudron user management │
│  - LiteLLM key management   │
│  - key-injection proxy      │
└─────────────────────────────┘
        ▲
        │ X-User-Email header (LibreChat forwards identity)
        │
LibreChat ──→ Member Portal ──→ LiteLLM ──→ backend

The three responsibilities

Webhook handler (POST /webhook/opencollective) — listens for Open Collective membership events and activates/deactivates members.
Key injector (/v1/*) — reads the member's email from the X-User-Email header, looks up their LiteLLM key, and forwards the request to the gateway with that key.
Admin (/health, /) — health and status.

Configuration (environment variables)

Variable	Purpose
`CLOUDRON_API`	Cloudron API origin (auto-set by Cloudron)
`CLOUDRON_TOKEN`	Cloudron API token (Read+Write)
`LITELLM_BASE`	LiteLLM gateway URL
`LITELLM_MASTER_KEY`	LiteLLM master key
`OPENCOLLECTIVE_WEBHOOK_SECRET`	Optional webhook signature secret

Tier budgets

Governance decision (set in Loomio). Defaults:

free — $2/month of tokens
member — $15/month
supporter — $30/month

LibreChat wiring

Point LibreChat's custom endpoint at this portal (not directly at LiteLLM), and add the identity header:

endpoints:
  custom:
    - name: "Inference Cooperative"
      apiKey: "${LITELLM_KEY}"
      baseURL: "https://portal.inference.coop/v1"
      headers:
        X-User-Email: "{{LIBRECHAT_USER_EMAIL}}"
      models:
        default: ["deepseek-v4-flash", "gpt-oss-120b"]
        fetch: true

Status

Scaffold — the three handlers are stubbed with the correct integration points. Remaining work before production:

Verify Open Collective webhook event names + payload shape
Verify Cloudron user-creation API payload (role/group assignment)
Add a persistent store (SQLite/Postgres) for email→key mapping
Add HMAC signature verification for the OC webhook
Wire the OIDC addon for admin access

2.7 KiB Raw Blame History