Getting started with Claude in the Cloud is actually more accessibe than getting going locally. Given you have signed into https://claude.ai/code you will be able to choose Cloud as an environment for your agent:

 

 

Now instead of choosing a local folder, you choose a remote repository:

 

And off you go!

 

Your real GitHub token never enters the sandbox. Git inside the VM uses a short-lived, scoped credential, and a proxy translates it to your actual token on the outside — so credentials and signing keys stay out of the agent's reach entirely. That same proxy hard-restricts pushes to the session's current branch. The result is a clean split: the session acts with your account's access, but never holds your secrets.