Enroll devices your way
Create private, single-use QR codes for configured IP or domain addresses. Kylok binds each enrollment to its management scope.
OPEN SOURCE · GO + KOTLIN · LGPL-3.0-ONLY
Add Android device management
to your product.
Kylok pairs a Go server SDK with a Kotlin Device Policy Controller for Android, so you can add enrollment, app delivery and device policies without building every management workflow from scratch. Run it on infrastructure you control.
Your Go serviceHTTP / HTTPS · your networkAndroid devices you manage
The building blocks for your product
Deliver apps and confirm the result
Assign signed APKs, resume interrupted downloads and verify the installed package, version and signing identity before reporting success.
Apply policies you can observe
Manage required apps, Android Lock Task, runtime permissions and selected restrictions. See the observed outcome for each rule.
Fit the stack you already own
Integrate public Go and Android APIs, start with durable SQLite/filesystem storage, and keep authorization and lifecycle in your host.
Coordinate your fleet
Freeze group targets, submit bounded bulk assignments, schedule APK windows and track one-shot reboot/secure-lock results.
Change networks with recovery
Manage Wi-Fi/private CAs using scoped secret references, a verified recovery route and staged rotation/release. Preserve unmanaged settings.
See Kylok in action
The example web console walks through enrollment, APK assignment and policy changes, then shows device and operation results. The Android dashboard separates requested state from what the device has actually installed or applied. Use the examples to evaluate the SDK flow; your product owns its management experience.
Run the examples · Integrate the SDK · Browse the API reference
Working features, checked on a real device
Device Owner enrollment
Online QR setup registered the POCO as a managed device and completed authenticated sync over LAN HTTP.
Signed app deployment
A signed app installed and updated from v1 to v2 with the expected package and signer. The server rejected a changed retry and a requested downgrade.
Managed app configuration
The independent sample app received typed values, changed its title and refresh control, and returned to defaults after policy release.
Sync and recovery
Background sync was observed after overnight idle. Manual sync recovered after server restart and ordinary LAN reconnection; after offline reboot, sync resumed when Wi-Fi returned without opening Kylok.
Selected device controls
Camera, screenshots and account modification were blocked and restored; the debugging restriction hid Developer options.
This is one-device evidence for the recorded source build, not a general device-support claim. Android allowed the configured app to be uninstalled despite an applied uninstall restriction. WAN-isolated enrollment, kiosk and runtime permissions remain unqualified. See the full record.
Experimental. Available packages are listed in GitHub Releases. Build Go and Android SDKs from the same source revision. Automated builds do not establish support for a particular Android device; see the current validation.
The current source includes host integration, PostgreSQL, reliable synchronization and managed app configuration. It also provides scoped groups, restartable bulk assignments, deployment windows and durable reboot/secure-lock commands with automated checks. Managed Wi-Fi/private CAs use secret references, authenticated route checks and rollback journals. Fleet/network paths have automated coverage and need device qualification; see the roadmap.