Articles about
consent

Klaviyo published 260 MCP tools with write access in a single sentence, and published nothing about session lifetime or permissions. In the same four days, a regulator, a messaging provider and a standards body all turned the opt-out path into something with an API and an audit trail.

The open-tracking pixel became a consent attribute, an entire CDP moved inside the customer's own Snowflake account, and any messaging channel became a no-code configuration. Three items, one week, and the same underlying move: the platform is where your logic runs, not where your state lives.