Skip to content

Ninebot KickScooter ES

Property Value
Model scooter
Hardware ID 33 (0x21)
Server ID 52
Commands 84
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7 —
iapWrite 8 (0x08) 0 cmd 8 —
iapCRC 9 (0x09) 0 cmd 9 —
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

bms

Name Index Ops Data Resp Index
rMaxPower 63 (0x3F) read 2B 63
setMaxPower 63 (0x3F) write — —
rBmsSn 16 (0x10) read 14B —
rBatterySN 16 (0x10) read 14B —
rBatteryInfo 49 (0x31) read 10B —
rVerDC 23 (0x17) read 4B —
rBmsDate 32 (0x20) read 2B —
rBmsInfoLowFrequence 16 (0x10) read 0x12 —
rBmsInfoLowFrequence2 27 (0x1B) read 4B —
rBmsInfoHighFrequence 49 (0x31) read 8B —
rBmsCellVol 64 (0x40) read 0x14 —
rBmsTemp 53 (0x35) read 2B —
rBMSCur 51 (0x33) read 2B —
rBMSVolt 52 (0x34) read 2B —

bms2

Name Index Ops Data Resp Index
rBms2Sn 16 (0x10) read 14B —
rBattery2SN 16 (0x10) read 14B —
rBattery2Info 49 (0x31) read 10B —
rVerDC2 23 (0x17) read 4B —
rBms2Date 32 (0x20) read 2B —
rBms2InfoLowFrequence 16 (0x10) read 0x12 —
rBms2InfoLowFrequence2 27 (0x1B) read 4B —
rBms2InfoHighFrequence 49 (0x31) read 8B —
rBms2CellVol 64 (0x40) read 0x14 —
rBms2Temp 53 (0x35) read 2B —
rBMSCur2 51 (0x33) read 2B —
rBMSVolt2 52 (0x34) read 2B —

ctrl

Name Index Ops Data Resp Index
active 0 cmd 87 (0x57) — —
rActDate 105 (0x69) read 2B 105
rBool 178 (0xB2) read 2B 178
rFunBool 125 (0x7D) read 2B 125
setFunBool 125 (0x7D) writeNR — —
setCruice 124 (0x7C) writeNR 1B 124
readCruice 124 (0x7C) read 2B 124
setLedModel 198 (0xC6) writeNR — 198
readLedModel 198 (0xC6) read 2B 198
setLedColor1 200 (0xC8) writeNR — 200
rLedColor1 200 (0xC8) read 2B 200
setLedColor2 202 (0xCA) writeNR — 202
rLedColor2 202 (0xCA) read 2B 202
setLedColor3 204 (0xCC) writeNR — 204
rLedColor3 204 (0xCC) read 2B 204
setLedColor4 206 (0xCE) writeNR — 206
rLedColor4 206 (0xCE) read 2B 206
setDecMode 123 (0x7B) writeNR 2B 123
readDecMode 123 (0x7B) read 2B 123
lock 112 (0x70) writeNR 1B 112
unlock 113 (0x71) writeNR 1B 113
rLeftMileage 37 (0x25) read 2B 37
rBattery 180 (0xB4) read 2B 180
rSN 16 (0x10) read 14B 16
rMileage 183 (0xB7) read 4B 183
rBodyTemp 62 (0x3E) read 2B —
rCtrlV 26 (0x1A) read 2B —
rBmsV 103 (0x67) read 2B —
rBms2V 102 (0x66) read 2B —
rBleV 104 (0x68) read 2B —
rEbsStrength 115 (0x73) read 2B —
wEbsStrength 115 (0x73) writeNR — —
rStartSpeed 126 (0x7E) read 2B —
wStartSpeed 126 (0x7E) writeNR — —
rPedestrianMode 119 (0x77) read 2B —
wPedestrianMode 119 (0x77) writeNR — —
setHCali 122 (0x7A) writeNR 1B —
rCPUId 218 (0xDA) read 12B 218
rSpeed 181 (0xB5) read 2B —
rSpeedMode 117 (0x75) read 2B 117
setSpeedMode 117 (0x75) writeNR — —
rSpeedLimit 116 (0x74) read 2B 116
setSpeedLimit 116 (0x74) writeNR — —
setBleName — cmd 80 (0x50) — —
rBlePwd 23 (0x17) read 6B 23
setBlePwdEncrypt 23 (0x17) writeNR 2B 23
rCPUId 218 (0xDA) read 12B 218
rRand 228 (0xE4) read 6B 228
rFlag 231 (0xE7) read 2B 231
rErrorCode 176 (0xB0) read 2B —
rWarnCode 190 (0xBE) read 2B —
turnOff 121 (0x79) writeNR 1B —
rSingleMileage 185 (0xB9) read 2B —
rRunningTime 186 (0xBA) read 2B —