diff --git a/server/src/services/plugin-config-validator.ts b/server/src/services/plugin-config-validator.ts
index e1330940..6eb95aa0 100644
--- a/server/src/services/plugin-config-validator.ts
+++ b/server/src/services/plugin-config-validator.ts
@@ -35,8 +35,9 @@ export function validateInstanceConfig(
   const applyFormats = (addFormats as any).default ?? addFormats;
   applyFormats(ajv);
   // Register the secret-ref format used by plugin manifests to mark fields that
-  // hold a Paperclip secret UUID rather than a raw value.
-  ajv.addFormat("secret-ref", /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i);
+  // hold a Paperclip secret UUID rather than a raw value. The format is a UI
+  // hint only — UUID validation happens in the secrets handler at resolve time.
+  ajv.addFormat("secret-ref", { validate: () => true });
   const validate = ajv.compile(schema);
   const valid = validate(configJson);