diff --git a/tools/test_psmp.py b/tools/test_psmp.py
index 658df5e..8c61c81 100644
--- a/tools/test_psmp.py
+++ b/tools/test_psmp.py
@@ -21,8 +21,16 @@ DATABASE_URL = os.getenv("DATABASE_URL_DEMO") or os.getenv("DATABASE_URL") \
 
 
 def get_secret(conn, key):
+    """Lit + dechiffre via le service officiel (Fernet)."""
+    from app.services.secrets_service import decrypt
     row = conn.execute(text("SELECT value FROM app_secrets WHERE key=:k"), {"k": key}).fetchone()
-    return row.value if row else None
+    if not row or not row.value:
+        return None
+    try:
+        return decrypt(row.value)
+    except Exception:
+        # Fallback si stocke en clair
+        return row.value
 
 
 def main():