Skip to content

Ninebot S 2

Property Value
Model balance
Hardware ID 30 (0x1E)
Server ID 33
Commands 98
Default timeout 1000 ms
Default retry 5

Default command types

Type Value
cmd_read 1 (0x01)
cmd_readACK 4 (0x04)
cmd_write 2 (0x02)
cmd_writeACK 5 (0x05)
cmd_writeNR 3 (0x03)

Command reference

System commands

Name Cmd Index Ops Data Description
iapBegin 7 (0x07) 0 cmd 7 —
iapWrite 8 (0x08) 0 cmd 8 —
iapCRC 9 (0x09) 0 cmd 9 —
firmwareReset 10 (0x0A) 0 cmd 10 0B resp idx: 0

ble

Name Index Ops Data Resp Index
rAudioEffect 114 (0x72) read 2B —
setAudioEffect 114 (0x72) writeNR — —
rAudioVolume 120 (0x78) read 2B —
setAudioVolume 2 (0x02) cmd 118 (0x76) — —

bms

Name Index Ops Data Resp Index
rBmsSn 16 (0x10) read 14B 16
rBatteryInfo 49 (0x31) read 10B —
rBatterySN 16 (0x10) read 14B —
rVerDC 23 (0x17) read 4B —
rBmsDate 32 (0x20) read 2B —
rBmsInfoLowFrequence 16 (0x10) read 0x12 —
rBmsInfoLowFrequence2 27 (0x1B) read 4B —
rBmsInfoHighFrequence 49 (0x31) read 8B —
rBmsCellVol 64 (0x40) read 0x1E —
rBmsTemp 53 (0x35) read 2B —

ctrl

Name Index Ops Data Resp Index
rBattery 34 (0x22) read 2B 34
rLeftMileage 37 (0x25) read 2B 37
rSteerSensitivity 161 (0xA1) read 2B 161
setSteerSensitivity 161 (0xA1) writeNR — 161
rRidingSensitivity 162 (0xA2) read 2B 162
setRidingSensitivity 162 (0xA2) writeNR — 162
rIdleModeBlancePoint 163 (0xA3) read 2B 163
setIdleModeBlancePoint 163 (0xA3) writeNR — —
active 0 cmd 87 (0x57) — —
rCPUId 218 (0xDA) read 12B 218
rCPUIdA 218 (0xDA) read 2B 218
rFunBool 211 (0xD3) read 2B 211
setFunBool 211 (0xD3) writeNR — —
rMode 224 (0xE0) read 2B 224
setMode 224 (0xE0) writeNR — —
rBool 178 (0xB2) read 2B 178
rCtrlV 26 (0x1A) read 2B 26
rBleV 104 (0x68) read 2B 104
resetData 155 (0x9B) writeNR 1B —
turnOff 121 (0x79) writeNR 1B —
rSN 16 (0x10) read 14B 16
rMileage 183 (0xB7) read 4B —
rBodyTemp 187 (0xBB) read 2B 187
rBmsV 103 (0x67) read 2B 103
rActDate 105 (0x69) read 2B 105
rLimitSpeed 116 (0x74) read 2B 116
lock 112 (0x70) writeNR 1B —
unlock 113 (0x71) writeNR 1B —
rCtrlBox 16384 (0x4000) cmd 5 (0x05) 4B 16384
rControlMode 169 (0xA9) read 2B 169
setControlMode 169 (0xA9) writeNR — —
rAssistMode 170 (0xAA) read 2B 170
setAssistMode 170 (0xAA) writeNR — 170
rFunBool2 209 (0xD1) read 2B 209
setLedModel 198 (0xC6) writeNR — 198
readLedModel 198 (0xC6) read 2B 198
setLedColor1 200 (0xC8) writeNR — 200
rLedColor1 200 (0xC8) read 2B 200
setLedColor2 202 (0xCA) writeNR — 202
rLedColor2 202 (0xCA) read 2B 202
setLedColor3 204 (0xCC) writeNR — 204
rLedColor3 204 (0xCC) read 2B 204
setLedColor4 206 (0xCE) writeNR — 206
rLedColor4 206 (0xCE) read 2B 206
setBleName — cmd 80 (0x50) — —
setSpeedMode 114 (0x72) writeNR — 114
rLimitModeSpeed 116 (0x74) read 2B 116
setLimitSpeed 116 (0x74) writeNR 2B 116
rHighestSpeed 188 (0xBC) read 2B 188
setWheelLedModel 85 (0x55) writeNR — 85
readWheelLedModel 85 (0x55) read 2B 85
setWheelLedColor1 86 (0x56) writeNR — 86
rWheelLedColor1 86 (0x56) read 2B 86
setWheelLedColor2 88 (0x58) writeNR — 88
rWheelLedColor2 88 (0x58) read 2B 88
setWheelLedColor3 90 (0x5A) writeNR — 90
rWheelLedColor3 90 (0x5A) read 2B 90
setWheelLedColor4 92 (0x5C) writeNR — 92
rWheelLedColor4 92 (0x5C) read 2B 92
rTeachStep 166 (0xA6) read 2B —
setTeachStep 166 (0xA6) writeNR — —
rTeachSpeed 38 (0x26) read 6B —
rLeftAngle 167 (0xA7) read 2B —
rRightAngle 168 (0xA8) read 2B —
rMileage 183 (0xB7) read 4B —
enableRemoteControl 122 (0x7A) writeNR 1B 122
setRemoteSpeed 123 (0x7B) writeNR 2B 123
rRemoteInfo 178 (0xB2) read 8B 178
rSpeed 181 (0xB5) read 2B —
rMaxRemoteSpeed 125 (0x7D) read 2B —
setMaxRemoteSpeed 125 (0x7D) writeNR 2B 125
rErrorCode 176 (0xB0) read 2B —
rWarnCode 190 (0xBE) read 2B —
rBlePwd 23 (0x17) read 6B 23
setBlePwdEncrypt 23 (0x17) writeNR 2B 23
setAttitudeSensor 117 (0x75) writeNR — —
rSysCur 80 (0x50) read 2B —
rDrvVolt 71 (0x47) read 2B —
rSingleMileage 185 (0xB9) read 2B —
rRunningTime 186 (0xBA) read 2B —