cURL in, cURL out
Paste or share any cURL command straight into a request. Export one back out with secrets redacted.
Curlew · Android
API, HTTP & cURL client
Know which
stage failed.
Other clients say “request failed”. Curlew says which stage broke — DNS, TCP or TLS — with timings and the full certificate chain. A complete HTTP client and API tester for the phone in your hand.
Free. Curlew Pro is a one-time purchase, never a subscription. Android 10 and later, phones and tablets.
Diagnose host · sample report
DNS lookup12 msPassed
3 addresses resolved · per-address timing
TCP connect41 msPassed
203.0.113.7:443
TLS handshake87 msFailed
Certificate expired 3 days ago · CN=api.example.com · issuer R11 · chain of 3 shown below
01 / What it does
Paste cURL.
Send. Inspect.
Diagnose host
DNS lookup with every resolved address and per-address timing. TCP connect with the refusal reason. TLS handshake with the negotiated protocol, cipher suite and full certificate chain. Runs standalone against localhost, a private IP and port, or a lab board that never sees the public internet.
Typed errors
A timeout is a timeout, a refused connect is a refused connect. Nothing is filed as “something went wrong”.
Big bodies, no crash
Large responses stream to disk. A 25 MiB payload is inspectable — raw, pretty, or as a tree — instead of an out-of-memory crash.
Postman collections
Bring your collections over (v2.0 and v2.1). Postman doesn't ship an Android app; your collections can still come along.
Cleartext guard
Plain http:// is refused until you allow it per request — and if credentials would travel unencrypted, it asks a second time.
02 / Privacy
Private by
construction.
- No ads, no account, no sign-in. Nothing to create, nothing to remember.
- No analytics, telemetry, crash-reporting SDK or advertising. Curlew has no backend of its own.
- Requests go only to the endpoints you type. A request sent from two different phones is indistinguishable to the server.
- Two permissions, and only two: Internet, to send your requests, and network state, to say “offline” instead of a generic error.
- Encrypted workspace. Saved requests, environments and history live in an encrypted database keyed from your device's hardware keystore.
- Backups are yours. A file you place, encrypted with a passphrase you choose. Curlew keeps no copy.
03 / Pricing
Free core.
Pro is one-time.
Free
Free features stay free.
- Full HTTP client: build requests or paste cURL
- Diagnose host: DNS, TCP and TLS, stage by stage
- cURL export with secrets redacted; Postman import
- Environments and variables, with secrets marked
- Raw, pretty and tree views for JSON; streamed large responses
- Encrypted workspace, passphrase-sealed backups
- Two-pane layout on tablets
Pro
One purchase. Never a subscription.
- WebSocket client
- Multipart bodies
- GraphQL helper
- HAR export
- Custom methods
- Shared collection headers
04 / Screens
On the phone
in your hand.
Support