diff --git a/plasma/reth/plasma-mainnet-reth-pruned-trace.yml b/plasma/reth/plasma-mainnet-reth-pruned-trace.yml
index 769089ab..2f034937 100644
--- a/plasma/reth/plasma-mainnet-reth-pruned-trace.yml
+++ b/plasma/reth/plasma-mainnet-reth-pruned-trace.yml
@@ -200,8 +200,13 @@ services:
     entrypoint: [/bin/bash, -c]
     command:
       - |
-        # Rewrite engine_api_url to this compose service (mainnet/testnet tomls ship chain-specific hosts).
-        sed -E 's|http://[^[:space:]/"]+:8551|http://plasma-mainnet:8551|g' /config/non-validator.toml > /tmp/non-validator.toml
+        # The fleet .jwtsecret is 0x-prefixed (geth/reth accept that); plasma-cli insists on a
+        # bare 64-char hex string, so hand it a stripped copy (2026-09-11).
+        tr -d '\n\r ' < /jwt/jwt.hex | sed 's/^0x//' > /tmp/jwt.hex
+        # Rewrite engine_api_url to this compose service (mainnet/testnet tomls ship chain-specific hosts)
+        # and point authrpc_jwtsecret at the stripped copy.
+        sed -E -e 's|http://[^[:space:]/"]+:8551|http://plasma-mainnet:8551|g' \
+               -e 's|^(authrpc_jwtsecret *= *).*$|\1"/tmp/jwt.hex"|' /config/non-validator.toml > /tmp/non-validator.toml
         exec plasma-cli observer \
           --config-path /tmp/non-validator.toml \
           --no-color \
diff --git a/plasma/reth/plasma-testnet-reth-pruned-trace.yml b/plasma/reth/plasma-testnet-reth-pruned-trace.yml
index 6592d563..4f4d66e4 100644
--- a/plasma/reth/plasma-testnet-reth-pruned-trace.yml
+++ b/plasma/reth/plasma-testnet-reth-pruned-trace.yml
@@ -200,8 +200,13 @@ services:
     entrypoint: [/bin/bash, -c]
     command:
       - |
-        # Rewrite engine_api_url to this compose service (mainnet/testnet tomls ship chain-specific hosts).
-        sed -E 's|http://[^[:space:]/"]+:8551|http://plasma-testnet:8551|g' /config/non-validator.toml > /tmp/non-validator.toml
+        # The fleet .jwtsecret is 0x-prefixed (geth/reth accept that); plasma-cli insists on a
+        # bare 64-char hex string, so hand it a stripped copy (2026-09-11).
+        tr -d '\n\r ' < /jwt/jwt.hex | sed 's/^0x//' > /tmp/jwt.hex
+        # Rewrite engine_api_url to this compose service (mainnet/testnet tomls ship chain-specific hosts)
+        # and point authrpc_jwtsecret at the stripped copy.
+        sed -E -e 's|http://[^[:space:]/"]+:8551|http://plasma-testnet:8551|g' \
+               -e 's|^(authrpc_jwtsecret *= *).*$|\1"/tmp/jwt.hex"|' /config/non-validator.toml > /tmp/non-validator.toml
         exec plasma-cli observer \
           --config-path /tmp/non-validator.toml \
           --no-color \
diff --git a/reference-rpc-endpoint.json b/reference-rpc-endpoint.json
index 620ab58d..2afaf935 100644
--- a/reference-rpc-endpoint.json
+++ b/reference-rpc-endpoint.json
@@ -1635,8 +1635,7 @@
     "lagging_lag": 5,
     "syncing_lag": 10,
     "urls": [
-      "https://garfield-testnet.zircuit.com/",
-      "https://zircuit-garfield-testnet.drpc.org"
+      "https://rpc.garfield-testnet.zircuit.com"
     ]
   },
   "avail": {