Skip to content

Ninebot Kickscooter E2/E2 Plus

Property Value
Model scooter
Hardware ID 125 (0x7D)
Server ID 536
Commands 69
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7
iapWrite 8 (0x08) 0 cmd 8
iapCRC 9 (0x09) 0 cmd 9
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

bms

Name Index Ops Data Resp Index
rMaxPower 63 (0x3F) read 2B 63
setMaxPower 63 (0x3F) writeNR
rBmsSn 16 (0x10) read 14B 16
rBatterySN 16 (0x10) read 14B
rBatteryInfo 49 (0x31) read 10B
rVerDC 23 (0x17) read 4B
rBMSCur 51 (0x33) read 2B
rBMSVolt 52 (0x34) read 2B
rBmsMoreInfo 139 (0x8B) read 2B 139
rBmsRemainCapacity 138 (0x8A) read 2B 138
rBmsManufactureDate 32 (0x20) read 2B 32
rBmsEnergyThroughput 128 (0x80) read 4B 128
rBmsCapacityThroughput 130 (0x82) read 4B 130
rBmsCycleCount 27 (0x1B) read 2B 27
rBmsDeepDischargeCount 133 (0x85) read 2B 133
rBmsExtremeUseTime 136 (0x88) read 4B 136
rBmsExtremeChargeTime 134 (0x86) read 4B 134

ctrl

Name Index Ops Data Resp Index
rActDate 105 (0x69) read 2B 105
active 0 cmd 87 (0x57)
rBool 178 (0xB2) read 2B 178
rFunBool 125 (0x7D) read 2B 125
setFunBool 125 (0x7D) writeNR
setCruice 124 (0x7C) writeNR 1B 124
readCruice 124 (0x7C) read 2B 124
setDecMode 118 (0x76) writeNR 2B 118
readDecMode 118 (0x76) read 2B 118
lock 112 (0x70) writeNR 1B 112
unlock 113 (0x71) writeNR 1B 113
rLeftMileage 37 (0x25) read 2B 37
rBattery 180 (0xB4) read 2B 180
rSN 16 (0x10) read 14B 16
rMileage 183 (0xB7) read 4B 183
rBodyTemp 62 (0x3E) read 2B
rCtrlV 26 (0x1A) read 2B
rBleV 104 (0x68) read 2B 104
rDashV 104 (0x68) read 2B 104
rBmsV 103 (0x67) read 2B
rEbsStrength 123 (0x7B) read 2B
wEbsStrength 123 (0x7B) writeNR
rStartSpeed 127 (0x7F) read 2B
wStartSpeed 127 (0x7F) writeNR
rPedestrianMode 119 (0x77) read 2B
wPedestrianMode 119 (0x77) writeNR
setHCali 122 (0x7A) writeNR 1B
rSpeed 181 (0xB5) read 2B
setBleName cmd 80 (0x50)
rCPUId 218 (0xDA) read 12B 218
rRand 228 (0xE4) read 6B 228
rFlag 231 (0xE7) read 2B 231
rLightMode 122 (0x7A) read 2B 122
setLightMode 122 (0x7A) writeNR
setLedModel 141 (0x8D) writeNR 141
readLedModel 141 (0x8D) read 2B 141
setEGearModel 138 (0x8A) writeNR 138
readEGearModel 138 (0x8A) read 2B 138
setDGearModel 139 (0x8B) writeNR 139
readDGearModel 139 (0x8B) read 2B 139
setSGearModel 140 (0x8C) writeNR 140
readSGearModel 140 (0x8C) read 2B 140
rErrorCode 27 (0x1B) read 2B
rWarnCode 28 (0x1C) read 2B
rSingleMileage 185 (0xB9) read 2B
rRunningTime 59 (0x3B) read 2B
rGearMode 117 (0x75) read 2B 117

dis

Name Index Ops Data Resp Index
rBmsV 48 (0x30) read 2B 48