From the manual, it looks like real time control is very limited (pitch, filter cutoff)
The messages for pitch are Bch 01 nn (where ch is the midi channel and n is in the range of 8 – 78 and is the Most significant byte (MSB). It has 4 bit resolution (so 16 values)
The messages for filter cutoff are Bch 02 nn. same format as above.
SYSEX can be used for editing patches off line and transmitting to the synth. The SYSEX dump format is actually pretty well detailed.
The Puppeteer
http://godlike.com.au