Skip to content

Ninebot Kickscooter E2/E2 Plus

Property Value
Model scooter
Hardware ID 125 (0x7D)
Server ID 536
Commands 69
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7 —
iapWrite 8 (0x08) 0 cmd 8 —
iapCRC 9 (0x09) 0 cmd 9 —
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

bms

Name Index Ops Data Resp Index
rMaxPower 63 (0x3F) read 2B 63
setMaxPower 63 (0x3F) writeNR — —
rBmsSn 16 (0x10) read 14B 16
rBatterySN 16 (0x10) read 14B —
rBatteryInfo 49 (0x31) read 10B —
rVerDC 23 (0x17) read 4B —
rBMSCur 51 (0x33) read 2B —
rBMSVolt 52 (0x34) read 2B —
rBmsMoreInfo 139 (0x8B) read 2B 139
rBmsRemainCapacity 138 (0x8A) read 2B 138
rBmsManufactureDate 32 (0x20) read 2B 32
rBmsEnergyThroughput 128 (0x80) read 4B 128
rBmsCapacityThroughput 130 (0x82) read 4B 130
rBmsCycleCount 27 (0x1B) read 2B 27
rBmsDeepDischargeCount 133 (0x85) read 2B 133
rBmsExtremeUseTime 136 (0x88) read 4B 136
rBmsExtremeChargeTime 134 (0x86) read 4B 134

ctrl

Name Index Ops Data Resp Index
rActDate 105 (0x69) read 2B 105
active 0 cmd 87 (0x57) — —
rBool 178 (0xB2) read 2B 178
rFunBool 125 (0x7D) read 2B 125
setFunBool 125 (0x7D) writeNR — —
setCruice 124 (0x7C) writeNR 1B 124
readCruice 124 (0x7C) read 2B 124
setDecMode 118 (0x76) writeNR 2B 118
readDecMode 118 (0x76) read 2B 118
lock 112 (0x70) writeNR 1B 112
unlock 113 (0x71) writeNR 1B 113
rLeftMileage 37 (0x25) read 2B 37
rBattery 180 (0xB4) read 2B 180
rSN 16 (0x10) read 14B 16
rMileage 183 (0xB7) read 4B 183
rBodyTemp 62 (0x3E) read 2B —
rCtrlV 26 (0x1A) read 2B —
rBleV 104 (0x68) read 2B 104
rDashV 104 (0x68) read 2B 104
rBmsV 103 (0x67) read 2B —
rEbsStrength 123 (0x7B) read 2B —
wEbsStrength 123 (0x7B) writeNR — —
rStartSpeed 127 (0x7F) read 2B —
wStartSpeed 127 (0x7F) writeNR — —
rPedestrianMode 119 (0x77) read 2B —
wPedestrianMode 119 (0x77) writeNR — —
setHCali 122 (0x7A) writeNR 1B —
rSpeed 181 (0xB5) read 2B —
setBleName — cmd 80 (0x50) — —
rCPUId 218 (0xDA) read 12B 218
rRand 228 (0xE4) read 6B 228
rFlag 231 (0xE7) read 2B 231
rLightMode 122 (0x7A) read 2B 122
setLightMode 122 (0x7A) writeNR — —
setLedModel 141 (0x8D) writeNR — 141
readLedModel 141 (0x8D) read 2B 141
setEGearModel 138 (0x8A) writeNR — 138
readEGearModel 138 (0x8A) read 2B 138
setDGearModel 139 (0x8B) writeNR — 139
readDGearModel 139 (0x8B) read 2B 139
setSGearModel 140 (0x8C) writeNR — 140
readSGearModel 140 (0x8C) read 2B 140
rErrorCode 27 (0x1B) read 2B —
rWarnCode 28 (0x1C) read 2B —
rSingleMileage 185 (0xB9) read 2B —
rRunningTime 59 (0x3B) read 2B —
rGearMode 117 (0x75) read 2B 117

dis

Name Index Ops Data Resp Index
rBmsV 48 (0x30) read 2B 48