diff --git a/docusaurus/docs/cms/api/graphql.md b/docusaurus/docs/cms/api/graphql.md
index 9db4738281..06df79753e 100644
--- a/docusaurus/docs/cms/api/graphql.md
+++ b/docusaurus/docs/cms/api/graphql.md
@@ -491,6 +491,10 @@ For instance, for a "Restaurant" content-type, the following mutations are gener
 | Update an existing "Restaurant" restaurant  | `updateRestaurant`  |
 | Delete an existing "Restaurant" restaurant  | `deleteRestaurant`  |
 
+:::note Private attributes in mutation inputs
+Attributes marked `private: true` in a content-type schema are **included** in the generated mutation input types (e.g., `RestaurantInput!`) so they can be set via create and update mutations. Private attributes remain hidden from GraphQL query response types and filter inputs, as they are write-only from a GraphQL perspective.
+:::
+
 ### Create a new document
 
 When creating new documents, the `data` argument will have an associated input type that is specific to your content-type.