How do I hide a field from the public API?

Hidden fields

Set "hidden": true on the column. Any column marked hidden is stripped from every response returned by the public API — it never leaves the server. This is how internal columns like project_id, tenant_id, or a password_hash stay out of API responses without needing separate serialization logic.