This is a list of AT commands, or actually Hayes commands. This is not a complete list of all commands, instead if focuses mostly on commands that are needed for GPRS/3G/UMTS/HSDPA and a few other more “exotic” commands that aren’t too well known. I wrote this mainly for myself, but I figure other might find it useful as well.

PIN

Command: AT+CPIN?
Response: +CPIN: <code>
Description: Check PIN status.

<code> can have several values, these are the more common ones

READY
Not waiting for PIN (no PIN or PIN already entered)
SIM PIN
Waiting for SIM PIN code.
SIM PUK
Waiting for SIM PUK code.

Command: AT+CPIN=<pin>[,<newpin>]
Response: OK | +CME ERROR: <error>
Description: Enter/change PIN.

Example

>AT+CPIN?
+CPIN: SIM PIN
OK

>AT+CPIN=”1234″
OK

>AT+CPIN?
+CPIN: READY
OK

Network registration

Command: AT+CREG?, AT+CREG=? , AT+CREG=<n>
Response: +CREG: <n>,<stat>,[,<lac>,<ci>[,<AcT>]] | +CME ERROR
Description: Get network registration status and controls unsolicited status callback, which when turned on will send a +CREG message with the new network status when something changes.

<n>

  1. Disable unsolicited status callback.
  2. Enable unsolicited status callback, +CREG: <stat>
  3. Enable unsolicited status callback, +CREG: <stat>,[,<lac>,<ci>[,<AcT>]]

<stat>

  1. Not registered, not searching
  2. Registered to home network
  3. Not registered, searching for network
  4. Registration denied
  5. Registered, roaming

<lac> Location area code
<ci> UTRAN/GERAN cell ID

<AcT> Network access type

  1. GSM
  2. Compact GSM
  3. UTRAN
  4. GSM with EGPRS
  5. UTRAN with HSDPA
  6. UTRAN with HSUPA
  7. UTRAN with HSDPA and HSUPA

UTRAN is a short for UMTS Terrestrial Radio Access Network

The following example shows that full unsolicited status callback is enabled, that the device is registered to its home network followed by an location area code followed by the UTRAN cell ID. Unfortunately this device does not show access type with this command.

Example:

>AT+CREG=2
OK
>AT+CREG?
+CREG: 2,1,”048A”,”58B2″

Command: AT+COPS?,
Response: +COPS: (<mode>,[<format>,<oper>[,<AcT>]]),…, (<modeN>,[<formatN>,<operN>[,<AcTN>]])

Command: AT+COPS=?
Response: +COPS: <stat>, long <oper>, short <oper>, numeric <oper>, <AcT>

Response: +CME ERROR:
Command: AT+COPS=<mode>,[<format>,<oper>[,<AcT>]]
Response: OK | +CME ERROR

Description: Get/set current GSM/UMTS network operator, list available operators. This can be used to change for example access type and switch network.

<mode>

  1. Automatic network selection (<oper> ignored)
  2. Manual network selection, <oper> must be present, <AcT> is optional.
  3. Deregister from network.
  4. Set <format only, no registration/deregistration.
  5. Manual selection with automatic fall back (enters automatic mode if manual selection fails).

<format>

  1. Long alphanumeric string
  2. Short alphanumeric string
  3. Numeric ID

<oper>
String (based on <format>) that identifies the operator.

<stat>

  1. Unknown
  2. Available
  3. Current
  4. Forbidden

<AcT> Network access type

  1. GSM
  2. Compact GSM
  3. UTRAN
  4. GSM with EGPRS
  5. UTRAN with HSDPA
  6. UTRAN with HSUPA
  7. UTRAN with HSDPA and HSUPA

The following example shows that the devices is connected to the operator called “3″ using UTRAN (which is UMTS, also called 3G). Listing available networks shows the current network, an additional UTMS network called Sweden3G that is forbidden and a GSM network called “3″ that is available.

Example:

>AT+COPS?
+COPS: 0,0,”3″,2

AT+COPS=?
+COPS: (2,”3″,”3″,”24004″,2),(1,”3″,”3″,”24008″,0),(3,”Sweden 3G”,”Sweden3G”,”2)

Command: AT+COPN
Response: +COPN: <numeric1>,<alpha1>, …, +COPN: <numericN>,<alphaN>
Description: Read operator names stored in device memory.

Example:

+COPN: “20408″,”NL KPN”
+COPN: “20412″,”NL Telfort”
+COPN: “20416″,”T-Mobile NL”
+COPN: “20420″,”Orange NL”

+COPN: “24002″,”3 SE”
+COPN: “24004″,”SWEDEN”
+COPN: “24005″,”Sweden 3G”
+COPN: “24008″,”Telenor SE”
+COPN: “24010″,”S COMVIQ”

Define PDP (Packet Data Protocol) context

Command: AT+CGDCONT=<cid> [,<pdptype> [,<apn>[,<pdpaddr> [,<dcomp>[,<hcomp]]]]]
Response: OK | ERROR

Command: AT+CGDCONT?
Response: +CGDCONT: <cid1>,<pdptype1>,<apn1>,<pdpaddr1><dcomp1>,<hcomp1>, …, <cidN>,<pdptypeN>,<apnN>,<pdpaddrN><dcompN>

Command: AT+CGDCONT=?
Response: +CGDCONT: (<cid_range>),<pdptype>,,,(<dcomp_range>),(<hcomp_range>)
Description: Allows configuration of one or several packet data protocol context which forms the base of a data connection.

<cid> PDP context ID, minimum value is 1, maximum value depends on device and can be found with the =? command.

<pdptype> String parameter identifying the protocol type
IP – Internet Protocol
IPV6 – Internet Protocol, version 6
PPP – Point to Point Protocol

<apn> String that identifies the Access Point Name in the packet data network.

<pdpaddr> Requested address, if null (0.0.0.0) an address is requested dynamically.

<dcomp> PDP data compression control, off by default.

<hcomp> PDP header compression control, off by default.

Example:

> AT+CGDCONT=1,”IP”,”bredband.tre.se”
OK

>AT+CGDCONT?
+CGDCONT: 1,”IP”,”bredband.tre.se”,”0.0.0.0″,0,0

>AT+CGDCONT=?
+CGDCONT: (1-16),”IP”,,,(0-2),(0-4)
+CGDCONT: (1-16),”PPP”,,,(0-2),(0-4)
+CGDCONT: (1-16),”IPV6″,,,(0-2),(0-4)

PDP Authentication

Command: AT$QCPDPP=<cid>,<auth_type>,<auth_name>,<auth_pwd>
Response: OK | ERROR
Description: A Qualcomm command, defines authentication parameters for the PDP context id <cid>.

<auth_type>

  1. None
  2. PAP
  3. CHAP

<auth_name> and <auth_pwd> are strings with the authentication information.

Signal quality

Command: AT+CSQ
Response: +CSQ: <rssi>,<ber>
Description: Returns signal quality.

<rssi> Received Signal Strength Indicator

0
-113 dBm or less
1
-111 dBm
2 to 30
-109 to -53 dBm
31
-51 dBm or greater
99
not known or not detectable

<ber> Bit Error Rate, in percent 0..7.
99 not known or not detectable

A note on the RSSI (received signal strength), dBm is a decibel (logarithmic) scale with a reference of 1 milliwatt thus 0 dBm equals a received signal of 1 mW.
Signal strength is usually lower than 1 mW and therefore below 0, so the larger (closer to 0) the better signal strength.
You can convert the RSSI to dBM with
dBm = (rssi \times 2) - 113

Example

>AT+CSQ=?
+CSQ: (0-31,99),(99)
OK

>AT+CSQ
+CSQ: 14,99

Manufacturer/model/revision identification

Command: AT+GMI
Response: Manufacturer Identification string

Command: AT+GMM
Response: Model Identification string

Command: AT+GMR
Response: Revision Identification string

Example:

>AT+GMI
Option N.V.
OK

>AT+GMM
GTM378
OK

>AT+GMR
2.4.6Hd (Date: Oct 04 2007, Time: 11:59:08)

Option N.V. proprietary AT-style commands

Command: AT_OWANCALL=<pdp context>,<enabled>[,<callback enabled>]
Response: OK
Description: Used to initiate UMTS/HSDPA connections.

<pdp context> – Existing, valid, PDP context that specifies the intended APN to connect to.
<enabled> – 1 = Enable connection, 0 = Disable connection (disconnect)
<callback enabled> – 1 = Asynchronous callback when connection is established, 0 = silent

Example:

>AT_OWANCALL=1,1,1
OK
_OWANCALL: 1, 1

>AT_OWANCALL=1,0
OK
_OWANCALL: 1, 0

Command: AT_OWANDATA=<pdp context>
Response: _OWANDATA: <pdp context>, <ip address>, <route?>, <nameserver 1>, <nameserver 2>, <unknown>, <unknown>, <speed>
Description: Retrieve IP configuration from an established connection previously created with AT_OWANCALL

Example:

>AT_OWANDATA=1
_OWANDATA: 1, 79.138.181.171, 0.0.0.0, 80.251.192.244, 80.251.192.245, 0.0.0.0, 0.0.0.0, 72000

References

3GPP TS 27.007 V8.3.0 (2008-03) – AT command set for User Equipment (UE)
Specification details at 3gpp.org

63 Responses to “List of AT commands”
  1. Marcos says:

    I’d like to send SMS, changing the Sender ID, this is possible via AT?
    Do you know a way to do this?
    thank you
    Mark

  2. Fahim says:

    at+cops?
    this commant will tell u the sim operator name…..

  3. SMS Modem says:

    SMS Modem…

    [...]List of AT commands « shapeshifter.se[...]…

  4. pallavi says:

    can i know the AT command to get sim operator name like airtel,idea etc

  5. yosua says:

    Hi..

    can i use at+command for sending MMS??
    Thanks

  6. Denny says:

    Hi,

    I still learn about AT Command. Btw can you help me about AT command to recognize UMTS/WCDMA ? cause i try my program using Huawei E220 the RAT not recognize as UMTS or WCDMA.

    Thanks

  7. Mariano (Argentina) says:

    Great post, very useful!!

  8. Sumit Arora says:

    Sir,
    Iam trying to read message from mobile by using at commands on my pc now iam using nokia-c5, nokia-e51. but can’t fail to retrive message so kindly help me to solve this issue and when iam trying to apply AT+CMPS=? commands it gives something like this ()()() , Sir please help me to sort out this problem

  9. Kribe says:

    This page was a really fine find. Very useful even I have many AT-command manuals! Thanks!

  10. Mamunur says:

    If I wanna make my Nokia C5 mobile modem speed up to 2Mbps then what command should i type there in the advanced box (Extra…..). I mean my mobile speed is 460kpbs but download= 25kbps… To speed up it what should
    I do. Please tell me.

  11. mytradewiki.com…

    [...]List of AT commands « shapeshifter.se[...]…

  12. Anonymous says:

    [...] Pour les débutants en AT commandes qui se débrouille en anglais je vous donne le lien d’un article trés bien expliquer que j’ai pu trouvé sur le sujet, je m’en suis du reste servit comme base pour le script : http://www.shapeshifter.se/2008/04/30/list-of-at-commands/ [...]

  13.