Have you heard of Cheddar? It's a usage-based billing API that does almost everything you're talking about, minus the 2FA. That might have to be an external service, but if you're interested, I can double check.

https://gtchdr.com/2jRxYHx

Full disclaimer: I work there. (We're doing a massive website update, so until that's done, it might be helpful to chat. Let me know.)