Skip to content

Ninebot Kickscooter C2 Pro

Property Value
Model scooter
Hardware ID 124 (0x7C)
Server ID 535
Commands 70
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7 —
iapWrite 8 (0x08) 0 cmd 8 —
iapCRC 9 (0x09) 0 cmd 9 —
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

ble

Name Index Ops Data Resp Index
rWarn 72 (0x48) read 2B 72
setWarn 72 (0x48) writeNR — —
rAudioVolume 66 (0x42) read 2B 66
setAudioVolume 66 (0x42) writeNR — —
rAudioEffect 65 (0x41) read 2B —
setAudioEffect 65 (0x41) writeNR — —

bms

Name Index Ops Data Resp Index
rMaxPower 63 (0x3F) read 2B 63
setMaxPower 63 (0x3F) writeNR — —
rBmsSn 16 (0x10) read 14B 16
rBatterySN 16 (0x10) read 14B —
rBatteryInfo 49 (0x31) read 10B —
rVerDC 23 (0x17) read 4B —
rBMSCur 51 (0x33) read 2B —
rBMSVolt 52 (0x34) read 2B —

ctrl

Name Index Ops Data Resp Index
rActDate 105 (0x69) read 2B 105
active 0 cmd 87 (0x57) — —
rBool 178 (0xB2) read 2B 178
rFunBool 125 (0x7D) read 2B 125
setFunBool 125 (0x7D) writeNR — —
setCruice 124 (0x7C) writeNR 1B 124
readCruice 124 (0x7C) read 2B 124
setDecMode 118 (0x76) writeNR 2B 118
readDecMode 118 (0x76) read 2B 118
lock 112 (0x70) writeNR 1B 112
unlock 113 (0x71) writeNR 1B 113
rLeftMileage 37 (0x25) read 2B 37
rBattery 180 (0xB4) read 2B 180
rSN 16 (0x10) read 14B 16
rMileage 183 (0xB7) read 4B 183
rBodyTemp 62 (0x3E) read 2B —
rCtrlV 26 (0x1A) read 2B —
rBleV 104 (0x68) read 2B 104
rDashV 104 (0x68) read 2B 104
rBmsV 103 (0x67) read 2B —
rEbsStrength 123 (0x7B) read 2B —
wEbsStrength 123 (0x7B) writeNR — —
rStartSpeed 127 (0x7F) read 2B —
wStartSpeed 127 (0x7F) writeNR — —
rPedestrianMode 119 (0x77) read 2B —
wPedestrianMode 119 (0x77) writeNR — —
setHCali 122 (0x7A) writeNR 1B —
rSpeed 181 (0xB5) read 2B —
setBleName — cmd 80 (0x50) — —
rCPUId 218 (0xDA) read 12B 218
rRand 228 (0xE4) read 6B 228
rFlag 231 (0xE7) read 2B 231
setLedModel 141 (0x8D) writeNR — 141
readLedModel 141 (0x8D) read 2B 141
setEGearModel 138 (0x8A) writeNR — 138
readEGearModel 138 (0x8A) read 2B 138
setDGearModel 139 (0x8B) writeNR — 139
readDGearModel 139 (0x8B) read 2B 139
setSGearModel 140 (0x8C) writeNR — 140
readSGearModel 140 (0x8C) read 2B 140
rErrorCode 27 (0x1B) read 2B —
rWarnCode 28 (0x1C) read 2B —
rSpeedMode 114 (0x72) read 2B 114
setSpeedMode 114 (0x72) writeNR — 114
rLimitModeSpeed 115 (0x73) read 2B 115
setLimitSpeed 115 (0x73) writeNR 2B 115
rMaxSpeed 116 (0x74) read 2B 116
rSingleMileage 185 (0xB9) read 2B —
rRunningTime 186 (0xBA) read 2B —
rOnceRunningTime 59 (0x3B) read 2B —
rGearMode 117 (0x75) read 2B 117

dis

Name Index Ops Data Resp Index
rBmsV 48 (0x30) read 2B 48