PerfectPanel adds field-level controls to Admin API v2 to limit sensitive data exposure

PerfectPanel announced new advanced access settings for Admin API v2 that allow panel owners to decide exactly which fields are returned by the Get order list and Get user list methods. According to PerfectPanel, administrators can now hide specific data points—such as users’ contact details, account balances, and order-related provider information—directly from API responses. This update means external integrations and developers receive only the information required for their tasks, strengthening data security and aligning with least-privilege practices across panels built on PerfectPanel’s infrastructure.

The configuration is available under Panels › (…) › Admin API v2 settings. Panel owners using PerfectPanel will now be able to tailor response visibility at a granular level, ensuring sensitive panel information is not exposed to third-party tools by default. In practical terms, developers integrating with affected endpoints will notice that restricted fields no longer appear in responses, and should handle those omissions accordingly. Clients can expect stronger protection of personal details and balance information whenever panels connect to outside software, without changes to how they use the panel day to day.

PerfectPanel also reiterated operational guidance around key management. The company strongly recommends avoiding the sharing of Admin API keys with unfamiliar software or external developers. If access is unavoidable, administrators should grant it only when necessary and carefully configure key permissions to limit access strictly to the required data. Together, the new field-level controls and stricter key practices reduce unnecessary data exposure in common workflows and help panel owners enforce clear boundaries around what their integrations can see.