Ninebot S-Plus
| Property |
Value |
| Model |
balance |
| Hardware ID |
20 (0x14) |
| Server ID |
6 |
| Commands |
98 |
| Default timeout |
1000 ms |
| Default retry |
5 |
Default command types
| Type |
Value |
cmd_read |
1 (0x01) |
cmd_readACK |
4 (0x04) |
cmd_write |
2 (0x02) |
cmd_writeACK |
5 (0x05) |
cmd_writeNR |
3 (0x03) |
Command reference
System commands
| Name |
Cmd |
Index |
Ops |
Data |
Description |
iapBegin |
7 (0x07) |
0 |
cmd 7 |
— |
|
iapWrite |
8 (0x08) |
0 |
cmd 8 |
— |
|
iapCRC |
9 (0x09) |
0 |
cmd 9 |
— |
|
firmwareReset |
10 (0x0A) |
0 |
cmd 10 |
0B |
resp idx: 0 |
anchor
| Name |
Index |
Ops |
Data |
Resp Index |
rFollowAngle |
21 (0x15) |
read |
2B |
21 |
setrFollowAngle |
21 (0x15) |
writeNR |
— |
— |
ble
| Name |
Index |
Ops |
Data |
Resp Index |
setBlePwdEncrypt |
1 (0x01) |
cmd 96 (0x60) |
— |
— |
bms
| Name |
Index |
Ops |
Data |
Resp Index |
rBmsSn |
16 (0x10) |
read |
14B |
16 |
rBatteryInfo |
49 (0x31) |
read |
10B |
— |
rBatterySN |
16 (0x10) |
read |
14B |
— |
rVerDC |
23 (0x17) |
read |
4B |
— |
rBmsDate |
32 (0x20) |
read |
2B |
— |
rBmsInfoLowFrequence |
16 (0x10) |
read |
0x12 |
— |
rBmsInfoLowFrequence2 |
27 (0x1B) |
read |
4B |
— |
rBmsInfoHighFrequence |
49 (0x31) |
read |
8B |
— |
rBmsCellVol |
64 (0x40) |
read |
0x1E |
— |
rBmsTemp |
53 (0x35) |
read |
2B |
— |
crdb
| Name |
Index |
Ops |
Data |
Resp Index |
rAudioVolumeLowVersion |
170 (0xAA) |
read |
2B |
— |
setAudioVolumeLowVersion |
170 (0xAA) |
writeNR |
— |
— |
rRemoteShutter |
165 (0xA5) |
read |
2B |
165 |
setRemoteShutter |
165 (0xA5) |
writeNR |
— |
— |
rFollowSafeDistance |
160 (0xA0) |
read |
2B |
160 |
setFollowSafeDistance |
160 (0xA0) |
writeNR |
— |
— |
rFollowSpeed |
161 (0xA1) |
read |
2B |
161 |
setFollowSpeed |
161 (0xA1) |
writeNR |
— |
— |
rFunBool2 |
169 (0xA9) |
read |
2B |
169 |
setFunBool2 |
169 (0xA9) |
writeNR |
— |
— |
ctrl
| Name |
Index |
Ops |
Data |
Resp Index |
rBattery |
34 (0x22) |
read |
2B |
34 |
rLeftMileage |
37 (0x25) |
read |
2B |
37 |
rSteerSensitivity |
161 (0xA1) |
read |
2B |
161 |
setSteerSensitivity |
161 (0xA1) |
writeNR |
— |
— |
rRidingSensitivity |
162 (0xA2) |
read |
2B |
162 |
setRidingSensitivity |
162 (0xA2) |
writeNR |
— |
— |
rIdleModeBlancePoint |
163 (0xA3) |
read |
2B |
163 |
setIdleModeBlancePoint |
163 (0xA3) |
writeNR |
— |
— |
rAudioVolume |
164 (0xA4) |
read |
2B |
— |
setAudioVolume |
164 (0xA4) |
writeNR |
— |
— |
turnOff |
121 (0x79) |
writeNR |
1B |
— |
active |
0 |
cmd 87 (0x57) |
— |
— |
rCPUId |
218 (0xDA) |
read |
12B |
218 |
rCPUIdA |
218 (0xDA) |
read |
2B |
218 |
rFunBool |
211 (0xD3) |
read |
2B |
211 |
setFunBool |
211 (0xD3) |
writeNR |
— |
— |
rMode |
240 (0xF0) |
read |
2B |
240 |
setMode |
240 (0xF0) |
writeNR |
— |
— |
rBool |
178 (0xB2) |
read |
2B |
178 |
rBool2 |
191 (0xBF) |
read |
2B |
191 |
rCtrlV |
26 (0x1A) |
read |
2B |
26 |
rBleV |
104 (0x68) |
read |
2B |
104 |
rBmsV |
103 (0x67) |
read |
2B |
103 |
rRemoteMaxSpeed |
125 (0x7D) |
read |
2B |
125 |
setRemoteMaxSpeed |
125 (0x7D) |
writeNR |
— |
— |
rRemotemMileage |
45 (0x2D) |
read |
4B |
45 |
rFollowMileage |
43 (0x2B) |
read |
4B |
43 |
rSafeSpeed |
116 (0x74) |
read |
2B |
116 |
setSafeSpeed |
116 (0x74) |
writeNR |
— |
— |
rSN |
16 (0x10) |
read |
14B |
16 |
rMileage |
183 (0xB7) |
read |
4B |
— |
lock |
112 (0x70) |
writeNR |
1B |
112 |
unlock |
113 (0x71) |
writeNR |
1B |
113 |
rCtrlBox |
16384 (0x4000) |
cmd 12 (0x0C) |
4B |
16384 |
setLedModel |
198 (0xC6) |
writeNR |
— |
198 |
readLedModel |
198 (0xC6) |
read |
2B |
198 |
setLedColor1 |
200 (0xC8) |
writeNR |
— |
200 |
rLedColor1 |
200 (0xC8) |
read |
2B |
200 |
setLedColor2 |
202 (0xCA) |
writeNR |
— |
202 |
rLedColor2 |
202 (0xCA) |
read |
2B |
202 |
setLedColor3 |
204 (0xCC) |
writeNR |
— |
204 |
rLedColor3 |
204 (0xCC) |
read |
2B |
204 |
setLedColor4 |
206 (0xCE) |
writeNR |
— |
206 |
rLedColor4 |
206 (0xCE) |
read |
2B |
206 |
setBleName |
— |
cmd 80 (0x50) |
— |
— |
rLimitModeSpeed |
116 (0x74) |
read |
2B |
116 |
setLimitSpeed |
116 (0x74) |
writeNR |
2B |
116 |
rActDate |
105 (0x69) |
read |
2B |
105 |
rBodyTemp |
62 (0x3E) |
read |
2B |
62 |
rTeachStep |
166 (0xA6) |
read |
2B |
— |
setTeachStep |
166 (0xA6) |
writeNR |
— |
— |
rTeachSpeed |
38 (0x26) |
read |
6B |
— |
rLeftAngle |
167 (0xA7) |
read |
2B |
— |
rRightAngle |
168 (0xA8) |
read |
2B |
— |
rMileage |
183 (0xB7) |
read |
4B |
— |
enableRemoteControl |
122 (0x7A) |
writeNR |
1B |
122 |
setRemoteSpeed |
123 (0x7B) |
writeNR |
2B |
123 |
rRemoteInfo |
178 (0xB2) |
read |
8B |
178 |
rSpeed |
181 (0xB5) |
read |
2B |
— |
rMaxRemoteSpeed |
125 (0x7D) |
read |
2B |
— |
setMaxRemoteSpeed |
125 (0x7D) |
writeNR |
2B |
125 |
resetData |
155 (0x9B) |
writeNR |
1B |
— |
rErrorCode |
176 (0xB0) |
read |
2B |
— |
rWarnCode |
190 (0xBE) |
read |
2B |
— |
setSpeedMode |
114 (0x72) |
writeNR |
— |
114 |
rHighestSpeed |
188 (0xBC) |
read |
2B |
188 |
rSupportPtz |
129 (0x81) |
read |
2B |
129 |
rSysCur |
80 (0x50) |
read |
2B |
— |
rDrvVolt |
71 (0x47) |
read |
2B |
— |
rSingleMileage |
185 (0xB9) |
read |
2B |
— |
rRunningTime |
186 (0xBA) |
read |
2B |
— |