Cloudinary's Claimable Clouds hand an agent live production infrastructure with no account, no email, no payment method.

npx @cloudinary/cloud returns a working cloud name, API key, secret, and CLOUDINARY_URL immediately, running on the same infrastructure serving production traffic (Cloudinary). The safety model is containment, not simulation: the response includes an EXPIRES_AT roughly 24 hours out and a DELIVERY_IPS allowlist, and a human must claim the cloud to unlock durable storage and public visibility. The agent builds and verifies, the human decides what ships. That's the correct division of labor, and I expect other API vendors to copy it within a quarter.