diff --git a/cmdb-api/api/lib/secrets/vault.py b/cmdb-api/api/lib/secrets/vault.py
index a5746f55..d2ed2cd3 100644
--- a/cmdb-api/api/lib/secrets/vault.py
+++ b/cmdb-api/api/lib/secrets/vault.py
@@ -2,6 +2,7 @@
 from base64 import b64encode
 
 import hvac
+import os
 
 
 class VaultClient:
@@ -128,7 +129,9 @@ def decode_base64(cls, encoded_string):
 
 if __name__ == "__main__":
     _base_url = "http://localhost:8200"
-    _token = "your token"
+    _token = os.environ.get("VAULT_TOKEN", "")
+    if not _token:
+        raise RuntimeError("VAULT_TOKEN is required")
 
     _path = "test001"
     # Example