The complete URL syntax you are looking for is typically used for Over-the-Air (OTA) iOS app installations. The "AMP" part often refers to the & HTML entity used to encode the ampersand in a link. The complete, standard text for this link in HTML is:
Cyber attackers and malicious insiders abuse itms-services for:
"A valid provisioning profile is required" Itms-services Action Download-manifest Amp-url Https
Installation Prompt: If the manifest is valid, the device prompts the user with an alert: "website.com would like to install [App Name]".
itms-services://?action=download-manifest&url=https://yourdomain.com itms-services:// The complete URL syntax you are looking for
Before Apple acquired TestFlight, this was the standard for over-the-air (OTA) beta distribution. Even today, many CI/CD pipelines (Jenkins, Fastlane) generate manifest .plist and .ipa pairs, then email or SMS the itms-services link to testers.
If you see itms-services in logs or network traffic: Abuse & Security Risks Cyber attackers and malicious
Result: The "Install" system dialog appears.
The itms-services://?action=download-manifest&url=HTTPS_URL protocol is the standard method for Over-the-Air (OTA) distribution of iOS applications outside the official App Store. It is primarily used for distributing enterprise in-house apps or beta versions to testers. How It Works