# Links

Since MLX Node 0.17, mlx://store links open the AI App Store in its own window, at a listing or with apps picked to install. A link never installs anything by itself.

> [!NOTE]
> MLX Node 0.17 or later. On an older MLX Node, `mlx://install?app=<id>` opens MLX Node's Apps page (see [Node links](/node/links)). The AI App Store is also on the web at [apps.mlx.app](https://apps.mlx.app).

## The links

| Link | What MLX Node does (0.17 or later) |
| --- | --- |
| `mlx://store` | Opens the AI App Store window. |
| `mlx://store?app=<slug>` | Opens the store at that listing. `<slug>` is the listing's slug, as in `apps.mlx.app/app/<slug>`. |
| `mlx://install?app=<a>,<b>` | Opens the store with up to 20 listings picked for install. The owner reviews them and presses Install. |

```bash title="Try it (MLX Node 0.17 or later)"
open "mlx://store?app=jan"
```

## What MLX Node checks before it installs

- **A maker's disk image or zip** is installed only when Apple has notarized it and it is signed with exactly the Developer ID team and bundle id the listing pins. A different team or bundle id is refused, and so is a downgrade or replacing an app that is running.
- **Commands** (Homebrew, npm, pip, uv, a shell line) are copied for you, and MLX Node opens Terminal so you can run them. MLX Node never runs them itself.
- **What you have installed** is found on the Mac by the listings' own bundle ids in Applications and their command names in fixed folders. No disk scan, and the list never leaves the Mac.

The catalogue MLX Node uses is the signed [catalogue API](/store/catalog); it checks the signature before it trusts it.

## Who can open these links

Any app on the Mac can open an `mlx://` link, and a URL scheme carries no caller identity. That is why these links only open a window: nothing is installed until the owner presses Install.