Embed agents directly in your product. Give them a browser sandbox to install packages, write files, and execute code, with no VMs to manage.
The agent calls a model with your API key, so you pay for the tokens it uses; the running cost is shown as you go. The key is kept in this tab only and sent to nobody but the provider it belongs to.