diff --git a/k8s/apps/paperless/paperless-ai.yaml b/k8s/apps/paperless/paperless-ai.yaml
index fa3bc2f..a7bdd7f 100644
--- a/k8s/apps/paperless/paperless-ai.yaml
+++ b/k8s/apps/paperless/paperless-ai.yaml
@@ -43,10 +43,10 @@ spec:
                 -d "client_secret=${LLM_AUTH_CLIENT_SECRET}" \
                 -d "scope=openid llm:inference" 2>/dev/null)
               
-              # Extract token
-              TOKEN=$(echo "$TOKEN_RESPONSE" | grep -o '"access_token":"[^"]*' | cut -d'"' -f4)
+              # Extract token using jq
+              TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r '.access_token')
               
-              if [ -z "$TOKEN" ]; then
+              if [ -z "$TOKEN" ] || [ "$TOKEN" = "null" ]; then
                 echo "[error] Failed to get token. Response: $TOKEN_RESPONSE"
                 exit 1
               fi