diff --git a/scripts/gpu-monitor.py b/scripts/gpu-monitor.py
index a417964..136bc85 100644
--- a/scripts/gpu-monitor.py
+++ b/scripts/gpu-monitor.py
@@ -299,8 +299,11 @@ def _send_zulip_dm(msg):
     """Send a DM to the owner via Zulip."""
     try:
         site = "https://chat.sysloggh.net"
-        email = "abiba-bot@chat.sysloggh.net"
-        key = "cKTDMZAPW08dk3zl05sStzO7HRztzyn8"
+        email = os.environ.get("ABIBA_ZULIP_EMAIL", "abiba-bot@chat.sysloggh.net")
+        key = os.environ.get("ZULIP_API_KEY", "")
+        if not key:
+            print("[alert] ZULIP_API_KEY unset — DM suppressed")
+            return
         owner = 9
         auth_b64 = base64.b64encode(f"{email}:{key}".encode()).decode()
         data = urllib.parse.urlencode({"type": "private", "to": f"[{owner}]", "content": msg}).encode()