Skip to content

Ninebot Kickscooter UiFi 1

Property Value
Model scooter
Hardware ID 121 (0x79)
Server ID 532
Commands 74
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7
iapWrite 8 (0x08) 0 cmd 8
iapCRC 9 (0x09) 0 cmd 9
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

ble

Name Index Ops Data Resp Index
rStateBool 82 (0x52) read 2B
wStartBond 30 (0x1E) cmd 110 (0x6E)
triggerHidBond 14 (0x0E) cmd 110 (0x6E)
resetHID 13 (0x0D) cmd 110 (0x6E)
clearHIDBond 9 (0x09) cmd 110 (0x6E)
clearAllHIDBond 12 (0x0C) cmd 110 (0x6E)
setHIDRSSI 2 (0x02) cmd 110 (0x6E)
getHIDRSSI 11 (0x0B) cmd 110 (0x6E)
rHidBool 80 (0x50) read 2B

dash

Name Index Ops Data Resp Index
rActDate 94 (0x5E) read 2B 94
active 0 cmd 87 (0x57)
rCPUId 218 (0xDA) read 12B 218
rDisPN 80 (0x50) read 14B 80
rPN 80 (0x50) read 14B 80
rCtrlV 40 (0x28) read 2B 40
rDashV 26 (0x1A) read 2B 26
rBmsV 48 (0x30) read 2B 48
rBleV 92 (0x5C) read 2B 92
rCtrlV 40 (0x28) read 2B 40
rBFGV 61 (0x3D) read 2B 61
rBool 29 (0x1D) read 2B 29
unlock 112 (0x70) writeNR 112
lock 113 (0x71) writeNR 113
openNfc 119 (0x77) writeNR
closeNfc 118 (0x76) writeNR
openPwd 117 (0x75) writeNR 117
closePwd 116 (0x74) writeNR 116
openLock 124 (0x7C) writeNR 124
closeLock 125 (0x7D) writeNR 125
openAlarm 122 (0x7A) writeNR 122
closeAlarm 123 (0x7B) writeNR 123
rSN 16 (0x10) read 14B 16
rLeftMileage 37 (0x25) read 2B 37
rBattery 181 (0xB5) read 2B 181
rMileage 183 (0xB7) read 4B 183
setDecMode 131 (0x83) writeNR
readDecMode 131 (0x83) read 2B 131
rDelayCloseLight 133 (0x85) read 2B 133
setDelayCloseLight 133 (0x85) writeNR
rFunBool 130 (0x82) read 2B 130
setFunBool 130 (0x82) writeNR
rSpeed 38 (0x26) read 2B 38
rMaxPower 140 (0x8C) read 2B 140
setMaxPower 140 (0x8C) writeNR
rMcuTemp 66 (0x42) read 2B
rRatedSpeed 72 (0x48) read 2B 72
rAccMode 135 (0x87) read 2B 135
setAccMode 135 (0x87) writeNR 135
rGearValue 137 (0x89) read 2B 137
setGearValue 137 (0x89) writeNR 137
rAutoPTime 138 (0x8A) read 2B
setAutoPTime 138 (0x8A) writeNR
setPwd 0 cmd 102 (0x66)
rRand 228 (0xE4) read 6B 228
rFlag 231 (0xE7) read 2B 231
rBatteryInfo 160 (0xA0) read 10B
rBatterySN 167 (0xA7) read 14B
rBmsSn 167 (0xA7) read 14B
rVerDC 165 (0xA5) read 4B
rNfcEmpty 67 (0x43) read 2B 67
writeNfcEnter 5 (0x05) cmd 104 (0x68)
writeNfcDelete 6 (0x06) cmd 104 (0x68)
writeNfcExit 10 (0x0A) cmd 104 (0x68)
clearAllKeys 0 cmd 128 (0x80)
rErrorCode 27 (0x1B) read 2B
rWarnCode 28 (0x1C) read 2B
rBMSCur 162 (0xA2) read 2B
rBMSVolt 163 (0xA3) read 2B
rSingleMileage 47 (0x2F) read 2B
rRunningTime 58 (0x3A) read 2B