Model XP7

← Back to All Products
← Back to Pneumatic Pilots

High-Low Pilot Model XP7

The most versatile alarm and shutdown system for the Oil and Gas Industry.

  • Connects up to 4 external alarms
  • Non-Bleeding Pneumatics
  • Certified for CL1D2 areas

XP7, Compact Multi-Alarm Shutdown System

(US Patent No. 7,209,806)

  • Pressure sensing from 60 to 20,000psi
  • Connects up to four external alarm sensors and provides first out indication for the operator to know the cause of the shutdown.
  • Three year batteries included, accessible solenoid valve, and non-bleeding Pneumatics
  • Low cost, simple to Install, and two year warranty

The most versatile alarm and shutdown system for the Oil and Gas Industry.

The XP7 offers the following advantages:

  • Certified suitable for operating in Class 1 Div 2 Hazardous Areas
  • Process status at a glance. With the switch-gauge indicating the actual reading and set-points, the operator instantly knows the conditions of the process.
  • A "Heart Beat" Green LED shows that the system is operating without problems.
  • The "Test" function shows the operator the cause of the last shutdown even after the system has been "Reset". Then, after a few seconds the system tests each alarm LED indicator.
  • High and low set-points are easily adjusted without the need for special testing equipment.

XP7 Compact Multi-Alarm Shutdown System

  • Three way solenoid valve rated to 100 PSI (150 PSI optional) can directly drive a pneumatic actuator.
  • Rated for operation from -40 °C to +85°C ambient temperature.
  • All components accessible from the front - easy battery replacement.
  • Pressing "Reset" will restore production and provide a 30 minute "grace period" for the alarm to return to normal - no "pull and pin" valves needed.
  • No sliding seals means no risk of the alarm system failing because of lubricants drying out.

Pressure Ranges

Pressure (In stock)


100 PSIG

200 PSIG

300 PSIG

600 PSIG

1,000 PSIG

1,500 PSIG

2,000 PSIG

3,000 PSIG

5,000 PSIG

10,00 PSIG

20,000 PSIG

XP7 / Typical Application

XP7 Pilot Typical Application


XP7 Compact Multi-Alarm Shutdown System


The XP7 alarm and shutdown system is a self-supported, compact shutdown device that has been designed to provide a safe and reliable mean to detect abnormal conditions on a production process and initiate a shutdown if any of the reading shows the operation is no longer within the pre-set safety margins.

The system has been built to withstand the adverse conditions of the oil-field environment and provides a straightforward interface with the operator. Abnormal conditions are indicated by indicator lamps (LEDs), each associated with a label indicating the condition detected.

Powered by lithium batteries, the system is expected to operate for about three years without replacing batteries and there is little or no maintenance needed besides recommended periodic function testing and gentle cleaning of contact points.

In addition to the High and Low-pressure alarms associated with the bourdon assembly included in the box, the XP7 can connect up to four (4) loop monitored external alarms plus two solid-state outputs for indicating shutdown and service needed respectively.

The external alarms channels can be connected to any “dry contact” (or “open collector”) type of sensor such as pressure or level switches, manual ESD station, telemetry shutdown commands etc. Each remote loop is monitored for wire integrity for ensuring that wiring faults are also detected.

Typically, the XP7 is shipped with the battery module installed in the “storage position” for shipment. Remove the four studs holding the battery module, rotate it 180º and carefully re-install as shown on page 9 of this manual. The XP7 is now energized and the green LED blinking every second.

The unit can be wall mounted or mounted directly on the process line. The box has a drain at the bottom to remove water condensation. Do not mount the XP7 sideways or upside down as this may allow rainwater to ingress and accumulate in the enclosure.

XP7 Manual Fig 1
Fig. 1: XP7 General Layout


XP7 - Pressure Sensing
Monitored pressure (i.e. flow-line pressure) is to be connected to the Sensing Port. Sensed pressure is not to exceed 10% over full scale as this would cause damage in the instrument and void warranty. If the flow is prone to pressure spikes, a pulsation dampener is to be installed between the sensing port and sensed fluid. It is recommended that an isolation valve is installed between the sensing port and process to allow for maintenance and testing.


  • Do not exceed rated range.
  • When connecting pressure bourdon assembly (bottom of XP7), use pipe dope or teflon tape on connection threads.
  • Use wrench on shank to tighten or loosen bourdon connection.
  • Do not twist case when installing, this will damage internal components and void warranty.
  • Do not over-tighten.

Connecting the Solenoid Valve
The typical connection the solenoid valve is as follows:

Port 1 (normally closed) - Supply Pneumatic Pressure (100 PSI Typ.)
Port 2 (common) - Actuator
Port 3 (normally open) - Exhaust

XP3 Solenoid pneumatic hydraulic typical connection Figure 2
Fig. 2: Solenoid pneumatic/hydraulic typical connection

Adjusting High and Low Pressure Alarm
The “Low Limit” contact is controlled by the knob on the left, while the “High Limit” contact is controlled by the knob on the right. To set the limit contact, simply turn the knob to the desired position in the scale.

Connecting the Solenoid Valve
As indicated before, the XP7 can connect up to four (4) external alarm sensors and each external loop is independently monitored for detecting alarm conditions. In addition to the above, the unit monitors the wiring integrity for wiring interruption, insulation degradation, etc. Each alarm loop is non-incendive.

Each input channel has an “End Of line Zener” (EOZ) that is to be connected in parallel with the sensing element. For example, if channel 3 of the field alarms is to be connected to a level switch installed on a water tank, then the EOZ is to be removed from the XP7 junction box and connected in parallel with the level switch as shown in Appendix A.

XP7 Fig 3

Fig. 3: Field Connection Box for non-incendive field wiring (See Appendix “A” for field wiring details)

When in normal operation, the XP7 sends short pulses of current to the remote sensors to verify wiring conditions and the existence or absence of alarms.

With the EOZ, the input should have a voltage between 7 and 7.5VDC, however, given the shortness of the pulse, this voltage cannot be verified with a regular voltmeter.

To overcome the above difficulty, the XP7 offers a mode where the inputs are energized for a few seconds at a time by following the procedure below:

  • Open junction box and have voltmeter ready for reading voltage
  • Press and hold the “Test – Reset” switch down to “Test” for about three seconds and then release
  • The first remote alarm blinks the corresponding LED for five seconds while the input is sending a current to the field connection
  • Read the voltage on first remote channel and confirm it is between seven (7) and seven and a half (7.5) volts (around 7.3V being typical). A voltage below three (3) Volts is considered as “alarm”
    • Voltages above 8 VDC indicate the remote sensor is not connected or an EOZ (End Of line Zener) is missing
    • A reading of about 0 VDC may indicate the corresponding sensor is “close”, or there is a short circuit in the loop or the XP7 timed out the test on that channel
    • A low voltage of about 0.5VDC may indicate the EOZ (End Of line Zener) has been connected backwards
    • Other low voltages (between 3 and 5 VDC) may indicate insulation’s deterioration in the field wiring
  • Once the XP7 stops the blinking the first channel and moves to channel 2, repeat voltage reading

The system can be commanded to “Reset” or “Test” by pressing the toggle switch up or down respectively. By pushing to “Reset” the operator commands the unit to return to the flowing condition. Pushing the “Test” function allows the operator to see the last recorded cause of shutdown (corresponding LED blinks fast) and then the system proceeds to slow blink each red LED to confirm all indicator circuits are operating normally.

The system is shipped in the “RESET” condition. The needle of the gauge touching either the “Low” or “High” set point causes the XP7 to switch the solenoid valve into “shutdown”. The corresponding alarm LED will blink once a second to indicate the actual cause of the shutdown even if the alarm goes away or another alarm is later detected.

EXAMPLE: If an XP7 senses a “High Pressure” in a production line it will cause a shutdown and the “High Pressure” LED will blink. After a number of hours, because of the shutdown, the sensed pressure may fall to the point where the high pressure clears and the needle of the gauge is now touching the low pressure alarm. In this case the XP7 continues flashing the “High Pressure” alarm LED until the operator presses “Reset”. If the operator wants to confirm the cause of alarm after the system is back to normal, they just need to press “Test” and the XP7 will blink the “High Pressure” LED to show the last recorded cause of shutdown.

After the XP7 is installed, the operator is to set the high and low alarm settings and open the isolation valve to allow pressure into the sensing port.

If the operator presses “Reset”, any existing alarm will be ignored for 30 minutes to allow the process to return to normal; there is no need to disturb the set-point before restoring the process. It is recommended not to move the set points out of the alarm condition as this involves the risk of the operator forgetting to return the alarms to the proper setting once the process returns to normal. If more than 30 minutes is needed, then it is suggested that the operator press “Reset” again before the time expires, re-starting the 30 minute countdown.

If the pressure returns to normal before the 30 minutes expires, the XP7 will re-arm itself and will initiate shutdown again if an alarm is sensed.

In some cases, it may be desirable to have a slower response to a given alarm channel, e.g. a tank level sensor may respond to waves or fluid motion in a tank. The XP7 offers the capability of introducing an eight (8) seconds delay on any of the four remote alarm channels.

For setting a time delay in any of the four field inputs, proceed as follows:

  1. Open XP7 enclosure
  2. While holding the “Test – Reset” switch down, momentarily depress the “Initialize” pushbutton on the controller board (upper left corner as shown on Fig 4, Page 7) and then let go the “Test – Reset” switch. The green LED responds by flashing rapidly for a few seconds
  3. Next, the XP7 flashes the first field alarm LED, rapidly to show that there is no time delay set, slowly if a time delay exists
  4. If the flashing indicates the desired setting, then take no action and the XP7 will move to the next channel
  5. If a time delay is desired and the LED is flashing rapidly, press the “Test – Reset” down to set a time delay
  6. If a time delay is not wanted and the LED is flashing slowly, press the “Test – Reset” up to remove the time delay
  7. As the XP7 moves on to the next channel, repeat step 4 through 6 for setting the desired operation mode
  8. Once all channels have been set, the operator may repeat step 2 and confirm each channel has been set correctly
  9. Close the enclosure and confirm the actual delay by tripping the alarm channels and observing the response on the XP7

XP7 Fig 4

Fig. 4: “Initialize” Pushbutton

The XP7 requires little maintenance but a minimum of a monthly visual examination and testing is recommended to insure that the unit as well as the systems and devices associated with the safety shutdown are operating properly.

It is recommended that once a year the gauge pointer and High and Low limit points be cleaned with a soft piece of cloth and a non residue contact cleaner to insure optimum performance.

When cleaning contacts do not use abrasives materials or fluids as they will cause damage and severely reduce system’s reliability.

Avoid opening the enclosure in a rainy or dusty environment.

The batteries are expected to have a life of about 3 years before replacement is needed. The XP7 routinely reads battery voltages and provides warning if the batteries need replacement. When the batteries are beginning to go low the XP7 will alternatively blink the green and “Lo Batt” LEDs to indicate that battery replacement is needed. If the batteries are not replaced within a few days the XP7 will blink only the “Lo Batt.” LED and initiate shutdown as further reduction in voltage may prevent the system from protecting the process.





Return used battery modules to Axiom Technologies for safe disposal.


  • Temperature Range: -40 to +85ºC
  • Humity range: 0 To 95% max., non condensing
  • Altitude: 2,000 m. max.
  • Hazardous area classification: Suitable for Class I, Division 2, Groups C & D, Hazardous Locations. Temp. Code T3C


  • Sensing pressure: Ranges of up to 20,000 psi max
  • Solenoid Valve pressure: 100 psi max. (standard), up to150 psi available


  • Electrical Source: Dual voltage lithium battery module 3.6 & 14.4 VDC
  • Current consumption:
    • 285 mA max. on 3.6VDC Circuits
    • 435 mA (3 A max. pulse) on 14.4VDC Circuits


XP7 Appendix A Installation notes