diff --git a/src/oidcserver.js b/src/oidcserver.js
index 77e76083b..40867d90e 100644
--- a/src/oidcserver.js
+++ b/src/oidcserver.js
@@ -742,9 +742,14 @@ async function start() {
                     });
                 },
                 userCodeConfirmSource: async function (ctx, form, client, deviceInfo, userCode) {
+                    let clientName = ctx.oidc.client.clientName || ctx.oidc.client.clientId;
+
+                    // only special case the cli to avoid dumping the internal cid
+                    if (clientName === oidcClients.ID_CLI) clientName = 'CLI';
+
                     ctx.body = ejs.render(TEMPLATE_DEVICE_CONFIRM, {
                         name: await branding.getCloudronName(),
-                        clientName: ctx.oidc.client.clientName || ctx.oidc.client.clientId,
+                        clientName,
                         userCode,
                         form
                     });