One way to do it should be setting the
status of the API products to
private. That should make them only visible to admins, regarding to the Codex (https://codex.wordpress.org/Post_Status#Private).
Another way to hide it from the catalog would be setting the
Hope that helps!