diff --git a/scripts/run-atgbics-mac.sh b/scripts/run-atgbics-mac.sh
index 806ca7b..051d17c 100755
--- a/scripts/run-atgbics-mac.sh
+++ b/scripts/run-atgbics-mac.sh
@@ -40,13 +40,14 @@ if [[ ! -f "$REPO_DIR/packages/scraper/dist/scrapers/atgbics.js" ]]; then
   cd "$REPO_DIR/packages/scraper" && npm run build
 fi
 
+# Load current DB password (not hardcoded — post-rotation secret lives in ~/.tip/.env)
+[ -f "$HOME/.tip/.env" ] && set -a && source "$HOME/.tip/.env" && set +a
 # Run scraper
 echo "Running ATGBICS scraper..."
 cd "$REPO_DIR"
 POSTGRES_HOST=127.0.0.1 \
 POSTGRES_PORT="${TUNNEL_PORT}" \
 POSTGRES_USER=tip \
-POSTGRES_PASSWORD=***REDACTED*** \
 POSTGRES_DB=transceiver_db \
 node packages/scraper/dist/scrapers/atgbics.js 2>&1 | tee "$LOG"