The backend's ApiKeyDto.prefix is just the 8-char public head (e.g. "PKXPCPH3"); the actual token the user pastes into their CLI is "pic_PKXPCPH3…". Display the full visible identifier so operators can match a row against the token in their notes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>