Open Source

ZTE U60 Pro Toolkit

Unlock the full potential of your ZTE U60 Pro 5G mobile router. On-device agent, native companion apps, and web-based bootstrap tools.

1
Process
vs 44
~0.8 MB
Memory
vs 225 MB
143
Endpoints
REST API
16
Categories
Full Coverage

The Hardware

ZTE U60 Pro (MU5250) — a 5G-Advanced portable router with Snapdragon X75 and a 10,000 mAh battery.

ZTE U60 Pro 5G router
Chipset
Qualcomm Snapdragon X75
CPU
4x Cortex-A55 @ 2.2 GHz
Modem
5G-A Sub-6 + mmWave
WiFi
WiFi 7 (802.11be), EHT160
Battery
10,000 mAh
Display
3.5" IPS LCD touchscreen
RAM
1.6 GB
Storage
8 GB eMMC
OS
OpenWrt 23.05 (ZWRT)
USB
USB-C (PD, OTG)
NR (5G)
n1, n2, n3, n5, n7, n8, n18, n20, n26, n28, n29, n38, n40, n41, n48, n66, n71, n75, n77, n78, n79
LTE
B1, B2, B3, B4, B5, B7, B8, B18, B19, B20, B26, B28, B29, B32, B34, B38, B39, B40, B41, B42, B43, B48, B66, B71

What's Included

On-Device Agent

Lightweight Rust HTTP server (~0.8 MB RSS) replaces ZTE's 225 MB daemon stack. 143 REST endpoints across 16 categories.

Mobile Companion Apps

Native iOS (SwiftUI) and Android (Compose) apps. Dashboard, signal monitor, SMS, band lock, device management — all over WiFi.

Web Bootstrap

Deploy the agent entirely from your browser. WebUSB-powered — no command line needed. Works in Chrome and Edge.

Signal Monitoring

Real-time RSRP, SINR, RSRQ readings. NR/LTE cell info, neighbor cell scanning, and signal quality detection.

Band Locking

Lock to specific NR and LTE bands. Cell locking, STC (Smart Tower Connect), and carrier aggregation control.

Privacy First

Zero telemetry. No phone-home to ZTE servers. Open-source agent runs on your LAN only. Full control over your device.

Feature Deep Dive

How each feature works in practice — from network testing to modem diagnostics.

Speed Test

Network

Measure internet throughput directly from the router.

How it works

The agent connects to speedtest.net servers from the U60 itself. Measures latency, download, and upload — giving you the true WAN speed without WiFi overhead. Results stream to the app in real time.

LAN Speed Test

Network

Test WiFi link quality between your phone and the router.

How it works

Your phone sends HTTP requests to the agent's /lan-test/* endpoints over WiFi. Measures ping (empty 200), download (agent streams zeros), and upload (phone streams, agent counts bytes). Tests your WiFi link, not WAN.

SMS Management

Telephony

Read, send, and delete SMS directly from the companion app.

How it works

Messages are read and sent via ubus commands on the device. Conversations are grouped by contact number. You can send to any number, delete individual messages, or clear entire threads.

SMS Forwarding

Telephony

Auto-forward incoming SMS to Telegram, webhooks, and more.

How it works

The agent listens for the ubus new-SMS event — no polling delay. Incoming messages are matched against rules (sender, keyword, or both). Matches are forwarded to Telegram, webhooks, ntfy, Discord, Slack, or another phone number, with automatic retry on failure.

Signal Monitoring

Modem

Real-time RSRP, SINR, and RSRQ readings with cell info.

How it works

Reads signal metrics from the modem in real time. Shows serving cell info (NR or LTE), EARFCN/ARFCN, PCI, and band number. Neighbor cell scanning is available for finding better towers in your area.

Band Locking

Modem

Lock the modem to specific NR or LTE bands and cells.

How it works

Force the modem onto specific NR or LTE bands. Cell locking by PCI + frequency. Smart Tower Connect (STC) for automatic best-tower selection. Useful for avoiding congested bands or forcing a better tower.

DNS-over-HTTPS

Privacy

Built-in encrypted DNS proxy for all LAN clients.

How it works

The agent runs a DoH proxy — LAN clients can use 192.168.0.1:9090 as their DNS resolver. Queries are forwarded over HTTPS to Cloudflare or Google. A response cache speeds up repeat lookups and reduces latency.

Scheduler

Automation

Schedule any API action as a one-time or recurring job.

How it works

Create cron-style jobs that call any agent API endpoint. Examples: reboot at 3 AM daily, toggle airplane mode on a schedule, run a speed test every hour. Jobs are persisted to disk and survive reboots.

Charge Policy

Device

iPhone-style charge limiter to protect battery health.

How it works

Set an 80% charge cap — the agent listens for ubus charger events and reacts instantly to state changes. Pauses charging at the limit and resumes at 75% (5% hysteresis). Keeps the battery in its healthiest charge range for long-term use.

AT Commands

Modem

Direct AT command interface for advanced modem diagnostics.

How it works

Send AT commands directly to /dev/at_mdm0. Query IMEI, modem firmware version, detailed signal info, or send custom AT strings. A power-user tool for deep modem diagnostics and configuration.

Why Use This Instead?

 zte-agentZTE Official
Processes144
Memory (RSS)~0.8 MB225 MB
Binary Size~2.3 MB~50+ MB combined
Threads~10~130+
TelemetryNonePhones home to iot.zte.com.cn
AppOpen-source iOS/AndroidClosed-source, Chinese-only

zte-agent provides equivalent API access using 0.35% of the memory

Mobile Companion Apps

Native apps that connect directly over WiFi — no computer needed.

App screenshot 1
App screenshot 2
App screenshot 3
SwiftUIJetpack Compose
Dashboard with signal cards, WiFi status, battery
SMS, voice calls, USSD, SIM Toolkit
Band locking, cell locking, network mode
Config backup/restore, scheduler, device info
SMS forwarding to email or webhook
iOS — Coming Soon
Android — Coming Soon

REST API

143 endpoints across 15 categories

Ready to get started?

Deploy the agent to your router and take full control of your U60 Pro.