Key Features
Request Composer
Build HTTP requests with a full-featured editor supporting JSON bodies, custom headers, query parameters, and dynamic path parameters (
:param) detected automatically from your URL.Collections & Environments
Organise requests into nested collections and folders. Swap between named environments (Dev, Staging, Production) without touching a single URL.
Pre/Post Scripts
Run pre-request scripts to inject dynamic values (
{{$timestamp}}, {{$guid}}, {{$randomInt}}), and extract values from responses with JSONPath for chained-request automation.Collection Runner
Execute an entire collection in sequence, view a live pass/fail report per request, and browse the full run history at any time.
OAuth 2.0
Native Authorization Code flow support with an embedded ephemeral local server for secure token exchange — no copy-pasting tokens from a browser.
Biometric Protection
Lock your workspace and sensitive API keys behind device-native biometrics (Face ID or fingerprint). Auto-lock policies trigger on app resume.
Postman / OpenAPI Import
Import existing Postman collections or OpenAPI specs to get started immediately without re-entering every endpoint by hand.
Cloud Sync & Incognito Mode
Sync your collections and environments across devices with encrypted Google Drive backup. Use Incognito Mode to prevent sensitive requests from appearing in history.
Android Home Widget
Pin a quick-launch widget to your Android home screen to fire favourite requests or open the composer in one tap.
Real-Time Variable Highlighting
Every
{{variable}} and :parameter lights up inline across all input fields so you always know which values are dynamic at a glance.Tech Stack
Xolo is built on a modern, production-grade Flutter dependency set. Every library was chosen for reliability and long-term maintenance.
Additional notable packages include
local_auth for biometrics, flutter_secure_storage for encrypted key storage, home_widget for the Android widget, google_sign_in + googleapis for Drive sync, and encrypt / crypto for client-side encryption.
Architecture Overview
Xolo follows a strict four-layer architecture that keeps UI code free of database concerns and makes the codebase easy to test at every level.- Core — Cross-cutting infrastructure: the go_router configuration, app themes, secure storage helpers, the Dio HTTP client, and the
AppLoggerservice. - Domain — The stable contract layer.
XoloRepositorydefines every data-access operation as an abstract interface. Domain entities and their mappers from raw Drift rows live here, completely isolated from SQLite specifics. - Data — Concrete implementations: the Drift database definition,
XoloRepositoryimplementations, and service classes for import (Postman/OpenAPI) and cloud sync. - Presentation — All screens, widgets, and Riverpod providers. Screens access data exclusively through
xoloRepositoryProvider, which resolves to the data-layer implementation. No screen ever touches a Drift$Tableobject directly.
XoloRepository is the explicit boundary between presentation and data. This separation means every screen can be tested against a fake in-memory repository without spinning up SQLite.
Platform Support
Xolo is currently in Release Candidate 1 (RC1). You can download the latest
app-release.apk directly from the GitHub Releases page and install it on any Android device today.Where to Go Next
Quickstart
Install the APK, create your first environment, and send a live request in under five minutes.
Request Composer
Deep-dive into headers, body types, path parameters, and real-time variable highlighting.