WeatherXM WG1200 Gateway · ESP32-S3 · 16 MB Flash · RSA-3072 Secure Boot V2

Dual-Boot Firmware Switcher & Device Provisioner

Install signed Muse Gadget OS into ota_1 (0x820000) while keeping your official WeatherXM Firmware intact in ota_0 (0x420000) and factory (0x020000). Once both slots are populated, switching between Muse and WeatherXM takes just ~2 seconds.

Slot A · ota_0 (0x420000)

WeatherXM Official

Preserves station identity, LoRa keys, and WeatherXM NVS (`0x00F000`).

Slot B · ota_1 (0x820000)

Muse Gadget OS

Isolated `muse_nvs` (`0xF21000`) for SDK token, Home Link BLE & Wi-Fi.

Post-Flash Setup

USB Token + BLE Pairing

Auto-injects `mgst_...` token & pairs `provision_v2` over Web Bluetooth.

Status: Disconnected

The port picker lists the WG1200's fast native port, USB JTAG/serial debug unit (303a:1001, ~20 s to flash). Its CH340 USB Serial port (1a86:7523) also works, but takes several minutes.

Show all serial ports (incl. CH340)

USB-C Port Connection

Plug your WG1200 into your computer via USB-C. No boot button press is required.

Slot B · ota_1 (0x820000) · RSA-3072 Signed

Muse Gadget OS (WG1200 Dual-Boot)

Hatch Link + Companion BLE + Weather Station Touch UI

v999.0.0

Installs signed Muse Gadget firmware to ota_1 (0x820000) and ensures the muse_nvs (0xF21000) partition is present. Your WeatherXM firmware in ota_0 and factory stays untouched.

1-tap "Switch to WeatherXM" button directly on the WG1200 touchscreen
P-256 ECDH + AES-256-GCM Home Link & Companion BLE provisioning
Auto-injects your mgst_... SDK token over USB right after boot

Muse Gadget SDK Token (mgst_...) Auto-injected on boot

If provided, the flasher automatically sends >sdk_token=... over USB Serial as soon as Muse boots.

SHA-256: 2cafa8f6bd0a…

Target: ota_1 (0x820000)

Slot A · ota_0 (0x420000) · Official Signed

WeatherXM Official Gateway Firmware

M5 WG1200 Production Station Gateway

v0.8.39

Boots or restores the official factory-signed WeatherXM WG1200 firmware in ota_0 (0x420000). If WeatherXM is already in ota_0, switching back from Muse takes ~2 seconds without re-flashing.

Preserves station claiming keys, EUI-64, LoRa settings & Wi-Fi
Keeps Muse Gadget OS installed in ota_1 for instant switching
Includes latest v0.8.39 plus v0.8.34 and v0.6.2 rollback images

Select WeatherXM Signed Release (ota_0)

Tip: If Muse is currently running, you can also switch to WeatherXM in 1 second via the touchscreen or USB Serial command >boot.weatherxm.

SHA-256: a60fe48b11a7…

Target: ota_0 (0x420000)

Step 2 · Web Bluetooth (Home Link + Companion)

Muse BLE Provisioner

Connects to MuseGadget-XXXXXX, pairs Home Link (provision_v2, v5 P-256 ECDH + AES-256-GCM) and writes Wi-Fi, your Muse VM and a 365-day device token pair.

Tip: turn on Bluetooth on the WG1200 first by swiping right on the touchscreen (or double-pressing the top button).

Crypto v5: testing… Proxy: checking… BLE: disconnected

Show all BLE devices (if the name isn't matched)

BLE Device	—
Home Link Service	Not connected
Node ID	—
Full Device ID	—
Firmware / Auth	—

Companion Service	Not connected
Wi-Fi	—
Home Link Linked?	—
Muse VM	—
Last BLE Reply	—

2A · Wi-Fi & SDK token

Wi-Fi SSID (2.4 GHz)

Wi-Fi password

Remember Wi-Fi password in this browser

SDK token (mgst_…, 48 chars)

Create one at gadgets.muse.ai (Account > SDK tokens). Shared with the flasher tab and remembered in this browser.

Node ID (homelink-xxxxxx) Lowercase tail of the BLE name MuseGadget-XXXXXX. Sent as device_id when minting.

Running Muse and want stock WeatherXM back?

2B · Muse VM & 365-day device tokens

Muse VM ID

Muse VM server (optional) Bare hostname, no https://. Leave empty for the firmware default. muse.ai is the account API, not the VM server.

Web access token (from https://muse.ai/api/auth/check) In your logged-in muse.ai tab, open DevTools (F12) → Console, paste this snippet and press Enter. It copies your web token to the clipboard; paste it above. If Chrome blocks pasting, type allow pasting first.

(async () => {
  const cp = typeof copy === "function" ? copy : null;
  const r = await fetch("/api/auth/check", { method: "POST", credentials: "include" });
  const d = await r.json().catch(() => ({}));
  const t = d.access_token;
  if (!t) return console.error("No access_token: are you logged in to muse.ai?", r.status, d);
  if (cp) { cp(t); console.log("%cWeb access_token copied to clipboard", "color:#3c3"); }
  return t;
})()

Device access_token (365-day)

Device refresh_token (365-day)

Step 3 · One-click provisioning (Home Link `provision_v2` + Companion `muse_ble`)

Connect over BLE to enable provisioning

1. ECDH Hello
2. Key Derive
3. Device Confirm
4. Mint Token
5. Companion Setup
6. provision_v2
7. Wi-Fi & Auth OK

Swipe-down card prompt

0 / 1023

What the WG1200 asks Muse when you swipe down. It's stored on the gateway, so changing it needs no reflash. The gateway fills {weather} (live readings), {location} (station GPS, or the fallback place) and {style} (a random card style). Line breaks become spaces.

Send via USB Bluetooth (Companion)

Live Technical Telemetry & Serial / BLE Log 0 lines

WG1200 Hardware Safety Guard & Dual-Boot Architecture

Enforced in-browser write barriers protect your WeatherXM station identity, Secure Boot V2 bootloader, and NVS calibration data.

Write Guard Active

RSA-3072 Secure Boot V2

Every image's SHA-256 and RSA-PSS signature are checked against the WG1200 signing key before a byte is written, and the whole slot is MD5-verified on the chip afterwards.

WeatherXM NVS Protected

Writes to 0x0000–0xBFF0, nvs (0xF000), factory (0x20000), nvs_key (0xC20000), and spiffs are strictly blocked.

Isolated `muse_nvs` (`0xF21000`)

Muse stores its SDK token, BLE pairing keys, and Wi-Fi credentials in its own 64 KB partition at 0xF21000.

Instant Slot Switch

With WeatherXM in ota_0 and Muse in ota_1, switching firmwares only updates otadata (0x13000), after a quick on-chip check that the slot holds the exact build.

Dual-Boot Firmware Switcher & Device Provisioner

Connected WG1200 Hardware & Partition Telemetry

Preparing Flash Operation...

WG1200 Booted Successfully

Muse Gadget OS (WG1200 Dual-Boot)

WeatherXM Official Gateway Firmware

Muse BLE Provisioner

2A · Wi-Fi & SDK token

2B · Muse VM & 365-day device tokens

Step 3 · One-click provisioning (Home Link `provision_v2` + Companion `muse_ble`)

Swipe-down card prompt

WG1200 Hardware Safety Guard & Dual-Boot Architecture

Install / Switch Firmware

Advanced Flash & Recovery Tools

Dual-Boot Firmware Switcher & Device Provisioner

Connected WG1200 Hardware & Partition Telemetry

Preparing Flash Operation...

WG1200 Booted Successfully

Muse Gadget OS (WG1200 Dual-Boot)

WeatherXM Official Gateway Firmware

Muse BLE Provisioner

2A · Wi-Fi & SDK token

2B · Muse VM & 365-day device tokens

Step 3 · One-click provisioning (Home Link provision_v2 + Companion muse_ble)

Swipe-down card prompt

WG1200 Hardware Safety Guard & Dual-Boot Architecture

Step 3 · One-click provisioning (Home Link `provision_v2` + Companion `muse_ble`)