RAV4 Plugin hybrid AC remote control #192

damischa1 · 2022-10-28T11:06:37Z

damischa1
Oct 28, 2022

Hello,

I did some reverse engineering to support turning on AC + heating of RAV4 API.

Did not have much time today and did not get very far yet. But I will share my findings because could not find this elsewhere in internet:

On the AC status page it is sending this request to get status of remote control.

GET https://myt-agg.toyota-europe.com/cma/api/vehicles/$CAR_ID/remoteControl/status HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=xxxxxxxxx.xxxxxx..
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.ccccc.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

I will document some more here when I have time.

damischa1 · 2022-10-28T11:19:58Z

damischa1
Oct 28, 2022
Author

Actual request to turn on AC:

POST https://myt-agg.toyota-europe.com/cma/api/vehicles/$CAR_ID/remoteControl HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=...
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Content-Type: application/json; charset=UTF-8
Content-Length: 145
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

{
"RemoteHvac": {
"Option": {
"FrontDefogger": 1,
"RearDefogger": 1
},
"Sw": 1,
"Temperature": {
"SettingTemperature": 26,
"SettingType": 0,
"TemperatureUnit": 1
}
}
}

3 replies

joro75 Oct 28, 2022
Collaborator

Hi @damischa1,

This all is very useful information! Thanks!
I do have one additional question at this moment: Can you also send the contents of the request to turn the AC off? At this moment it is not clear to me if the AC is triggered to be activated by the FrontDefogger/RearDefogger or by the Sw argument. Based on the 'turn off' request content we may be able to deduce which setting is actually controlling the AC.

Thanks in advance!

damischa1 Oct 30, 2022
Author

I tried debuggin today, but the AC was not cooperative enought to turn on today (it happens quite often for whatever reason). I will send you some log next time I will try the debug.

damischa1 Oct 31, 2022
Author

I created a pull request with HVAC api debugging results.

damischa1 · 2022-10-28T11:25:05Z

damischa1
Oct 28, 2022
Author

After sending the POST request, it starts polling for HVAC status:
GET https://myt-agg.toyota-europe.com/cma/api/vehicles/$CAR_ID/remoteControl/status?remoteControl=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=xxxx*
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip
Query

And gets response:
{
"RemoteControlResult": {
"Status": 9
},
"ReturnCode": "000000",
"VehicleInfo": {
"AcquisitionDatetime": "2022-10-28T06:32:56Z",
"ChargeInfo": {
"BatteryPowerSupplyPossibleTime": 16383,
"ChargeEndTime": "42:35",
"ChargeRemainingAmount": 100,
"ChargeStartTime": "42:35",
"ChargeType": 15,
"ChargeWeek": 0,
"ChargingStatus": "chargeComplete",
"ConnectorStatus": 5,
"EvDistanceInKm": 81.2,
"EvDistanceWithAirCoInKm": 75.52,
"EvTravelableDistance": 81.2,
"EvTravelableDistanceSubtractionRate": 7,
"GasolineTravelableDistance": 625,
"GasolineTravelableDistanceUnit": 1,
"PlugInHistory": 33,
"PlugStatus": 45,
"RemainingChargeTime": 65535,
"SettingChangeAcceptanceStatus": 0
},
"RemoteHvacInfo": {
"BlowerStatus": 0,
"FrontDefoggerStatus": 0,
"InsideTemperature": 19,
"LatestAcStartTime": "2022-10-27T20:41:10Z",
"RearDefoggerStatus": 0,
"RemoteHvacMode": 0,
"RemoteHvacProhibitionSignal": 1,
"SettingTemperature": 21.0,
"TemperatureDisplayFlag": 1,
"Temperaturelevel": 26
}
}
}

1 reply

damischa1 Nov 1, 2022
Author

RAV4 plug-in hybrid HVAC remote control API

Log of the API requests.

Get HVAC Status

Request

GET https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/remoteControl/status HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

Response

content-type: application/json;charset=utf-8
id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
vary: Origin
access-control-allow-credentials: true
content-length: 852
date: Mon, 31 Oct 2022 07:02:46 GMT
strict-transport-security: max-age=86400
  
{
    "ReturnCode": "000000",
    "VehicleInfo": {
        "AcquisitionDatetime": "2022-10-31T06:56:52Z",
        "ChargeInfo": {
            "BatteryPowerSupplyPossibleTime": 16383,
            "ChargeEndTime": "42:35",
            "ChargeRemainingAmount": 91,
            "ChargeStartTime": "42:35",
            "ChargeType": 15,
            "ChargeWeek": 0,
            "ChargingStatus": "none",
            "ConnectorStatus": 2,
            "EvDistanceInKm": 68.6,
            "EvDistanceWithAirCoInKm": 64.48,
            "EvTravelableDistance": 68.6,
            "EvTravelableDistanceSubtractionRate": 6,
            "GasolineTravelableDistance": 349,
            "GasolineTravelableDistanceUnit": 1,
            "PlugInHistory": 33,
            "PlugStatus": 12,
            "RemainingChargeTime": 65535,
            "SettingChangeAcceptanceStatus": 0
        },
        "RemoteHvacInfo": {
            "BlowerStatus": 0,
            "FrontDefoggerStatus": 0,
            "InsideTemperature": 22,
            "LatestAcStartTime": "2022-10-31T05:47:36Z",
            "RearDefoggerStatus": 0,
            "RemoteHvacMode": 0,
            "RemoteHvacProhibitionSignal": 1,
            "SettingTemperature": 28.0,
            "TemperatureDisplayFlag": 1,
            "Temperaturelevel": 29
        }
    }
}

Turn On HVAC

Request

POST https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/remoteControl HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Content-Type: application/json; charset=UTF-8
Content-Length: 145
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

{
    "RemoteHvac": {
        "Option": {
            "FrontDefogger": 0,
            "RearDefogger": 0
        },
        "Sw": 1,
        "Temperature": {
            "SettingTemperature": 20,
            "SettingType": 0,
            "TemperatureUnit": 1
        }
    }
}

Response

content-type: application/json;charset=utf-8
id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
vary: Origin
access-control-allow-credentials: true
content-length: 77
date: Sun, 30 Oct 2022 14:02:55 GMT
strict-transport-security: max-age=86400

{
    "AppRequestNo": "cf9b85a7-2448-3649-9890-c7cd4a3b1e2f",
    "ReturnCode": "000000"
}

Turn Off HVAC

Request

POST https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/remoteControl HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Content-Type: application/json; charset=UTF-8
Content-Length: 23
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

{
    "RemoteHvac": {
        "Sw": 0
    }
}

Response

content-type: application/json;charset=utf-8
id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
vary: Origin
access-control-allow-credentials: true
content-length: 77
date: Sun, 30 Oct 2022 14:01:29 GMT
strict-transport-security: max-age=86400

{
    "AppRequestNo": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "ReturnCode": "000000"
}

Get AC Reservations (Schedules)

Request

GET https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/hvac/reservations HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

Response

{
    "AirConditioningReservation": [
        {
            "ActiveStatus": 0,
            "Onetime": {
                "AirConditioning": {
                    "Option": {
                        "FrontDefogger": 1,
                        "RearDefogger": 1
                    },
                    "Temperature": {
                        "SettingTemperature": 29.0,
                        "SettingType": 0,
                        "TemperatureUnit": 1
                    }
                },
                "Date": "2021-03-11",
                "Hours": 3,
                "Minutes": 45
            },
            "ReservationNo": 1
        }
    ],
    "ReturnCode": "000000"
}

Enable reservation

Request

PUT https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/hvac/reservations/1 HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Content-Type: application/json; charset=UTF-8
Content-Length: 18
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

{
    "ActiveStatus": 1
}

Response

content-type: application/json;charset=utf-8
id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
vary: Origin
access-control-allow-credentials: true
content-length: 23
date: Sun, 30 Oct 2022 11:53:12 GMT
strict-transport-security: max-age=86400

{
    "ReturnCode": "000000"
}

New Reservation

Request

POST https://myt-agg.toyota-europe.com/cma/api/vehicles/$VEHICLE_ID/hvac/reservations HTTP/1.1
uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
X-TME-LOCALE: fi-fi
Cookie: iPlanetDirectoryPro=$COOKIE_DATA
brand: TOYOTA
X-TME-BRAND: TOYOTA
X-TME-ORIGIN: AN-TOYOTA
User-Agent: MyT/4.13.1 Dalvik/2.1.0 (Linux; U; Android 12; SM-G981B Build/SP1A.210812.016)
X-TME-APP-VERSION: 4.13.1
Accept-Language: fi-FI
Content-Type: application/json; charset=UTF-8
Content-Length: 214
Host: myt-agg.toyota-europe.com
Connection: Keep-Alive
Accept-Encoding: gzip

{
    "ActiveStatus": 1,
    "Repetition": {
        "AirConditioning": {
            "Option": {
                "FrontDefogger": 0,
                "RearDefogger": 0
            },
            "Temperature": {
                "SettingTemperature": 21.0,
                "SettingType": 0,
                "TemperatureUnit": 1
            }
        },
        "Hours": 11,
        "Minutes": 55,
        "Week": [
            4,
            6
        ]
    }
}

Response:

content-type: application/json;charset=utf-8
id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
vary: Origin
access-control-allow-credentials: true
content-length: 41
date: Sun, 30 Oct 2022 11:53:30 GMT
strict-transport-security: max-age=86400

JSON
{
    "ReservationNo": 2,
    "ReturnCode": "000000"
}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

RAV4 Plugin hybrid AC remote control #192

{{title}}

Replies: 2 comments 4 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

RAV4 Plugin hybrid AC remote control #192

damischa1 Oct 28, 2022

Replies: 2 comments · 4 replies

damischa1 Oct 28, 2022 Author

joro75 Oct 28, 2022 Collaborator

damischa1 Oct 30, 2022 Author

damischa1 Oct 31, 2022 Author

damischa1 Oct 28, 2022 Author

damischa1 Nov 1, 2022 Author

RAV4 plug-in hybrid HVAC remote control API

Get HVAC Status

Request

Response

Turn On HVAC

Request

Response

Turn Off HVAC

Request

Response

Get AC Reservations (Schedules)

Request

Response

Enable reservation

Request

Response

New Reservation

Request

Response:

damischa1
Oct 28, 2022

Replies: 2 comments 4 replies

damischa1
Oct 28, 2022
Author

joro75 Oct 28, 2022
Collaborator

damischa1 Oct 30, 2022
Author

damischa1 Oct 31, 2022
Author

damischa1
Oct 28, 2022
Author

damischa1 Nov 1, 2022
Author