{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Making Sense of Martech","title":"With MCP, There's No Sheriff with Israa Alrawi","html":"","width":"100%","height":180,"duration":2562,"description":"\"MCP adoption is outpacing security, and we're waiting until something really big gets broken to even address it. We've seen this movie before.\" — Israa\nMCP security risks are moving faster than the guardrails meant to contain them. In this episode of Making Sense of Martech, host Jacqueline Freedman sits down with Israa Alwari, founder of The Winbox, an email marketing education and agency helping DTC brands scale without burning their customer relationships down in the process. \nIsraa brings a rare lens to the MCP conversation: eight years in email deliverability, a background in public health and occupational safety, and a habit of asking the question everyone else skips: who actually owns this when it breaks? Together they tear apart the MCP hype cycle.\nThe answer, as it turns out, is you. The brand. The business that plugged it in.\nThis conversation is a necessary gut check before you plug in another connector: what MCPs actually do with your data, why the risk predates the protocol itself, and why the gap between adoption and accountability keeps widening for exactly the reasons you'd expect.\nTimestamps03:56 — Back to Basics: Fundamentals, correctly set-up systems, guarded platforms, solid infrastructure, drive 90% of real revenue. Every shiny new tool is just an add-on to that foundation.\n05:43 — Moving at 100,000mph Without a Seatbelt: Martech's move-fast culture is exactly what makes MCP adoption dangerous. Building fast without monitoring what you've built is how deliverability and data problems compound silently.\n12:30 — Education Before the Checkbox: Platforms should require real education before a user can activate an MCP, not a liability-clearing terms-of-service click that nobody reads.\n17:50 — The Risk Started Before MCP: Data-exfiltration risk didn't start with MCP. SaaS vendors were quietly scraping client lists out of Klaviyo three years ago. MCP is a new surface for an old, unresolved vulnerability.\n20:18 — Platforms Should Build AI In-House:...","thumbnail_url":"https://img.transistorcdn.com/2xBD0217Lw_p8ycegYQlNgN3_3yOZ9LCNtHUu1dKlq8/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS9lZjUz/OGYwZDVlYWU2MzVj/MTA0NjA3Mzc4Zjkw/MTQ0Ni5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}