Is MLX safe on my Mac?

Letting an app run work on your Mac is a fair thing to be careful about. Here's exactly what MLX Node does, what it can and can't touch, what it sends, and the risks that remain.

Updated

The short version

  • MLX Node is signed with an Apple Developer ID, notarized by Apple and runs in the macOS App Sandbox.
  • It can reach the network and its own files. It can't read your documents, photos or other apps.
  • It works only within your limits and can pause on battery or heat. New installs start in manual mode: it works until you press Stop.
  • The main risks are financial, not technical: MLX Tokens can lose value. Read the risk disclosure.

1Signed, notarized and sandboxed

MLX Node is signed with an Apple Developer ID and notarized: Apple scanned it for malicious software before macOS lets it open (Apple). Only notarized builds are published, and the app installs an update only after checking it carries the same Developer ID signature.

It runs in the macOS App Sandbox. The only permissions it asks for are network access and its Downloads folder, used for updates and for files you choose to save from your wallet. It can't open your documents, photos, mail or other apps' data. A small built-in updater runs outside the sandbox; its only job is to install MLX Node updates signed by the same developer.

2What it runs

The app runs AI jobs: prompts for a small open language model, run with Apple's MLX framework, and sends back the answers. The network compares them with other Macs' answers to the same jobs and pays MLX Tokens for verified work.

You decide when it works. New installs start in manual mode: once your Mac is linked and plugged in, MLX Node works within your limits until you press Stop. You can instead let it work only after the Mac has been idle, cap how hard it works, and pause it automatically on battery or when the Mac gets warm. MLX.app for iPhone and iPad can pause and resume your Macs remotely.

3What it sends

A linked Mac sends a signed status about once a minute: app and macOS version, chip, memory, whether it's working or paused and why, temperature level, whether it's on power, your limits and its measured speed. Each Mac has its own device key in the Secure Enclave, which never leaves the Mac (Apple).

Each Mac appears on the public map at MLX World at its approximate city, rounded to about 10 km, without your wallet, the Mac's name or its IP address. The Privacy Policy lists everything kept and for how long.

4The risks that remain

  • Token value. MLX Tokens are new. Their price can fall, and they could become worthless. Mined MLX is locked for 30 days (3 to 20 with a dedicated seat).
  • An early network. The ledger is run by the MLX Network operator today, and audits are still to come. The whitepaper and risk disclosure explain what that means.
  • Wear and power. Sustained work uses electricity and, on a laptop, battery cycles. Use the limits, or run it on power.

Questions? Write to support@mlx.app or see Help.

5Questions

Is MLX Node a virus or malware?
No. It's signed with an Apple Developer ID, notarized by Apple, and runs in the App Sandbox, which stops it from reading your files or other apps.
Can MLX Node see my files?
No. The sandbox limits it to the network, its own container and its Downloads folder access, used for updates and files you save from your wallet.
How do I stop or uninstall MLX Node?
Press Stop in the menu bar panel, or quit the app. To uninstall, quit it and drag the app from Applications to the Trash.
Is MLX a scam?
Judge for yourself: the app is free, every reward and transaction is public on the explorer, every Mac is on the live map and the rules are in the whitepaper. The token carries real risk, which the risk disclosure sets out plainly.

Sources

  1. Appledeveloper.apple.com
  2. Appledeveloper.apple.com

Read next

Is MLX Node safe? What it runs on your Mac and what it can see