Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the destructiveHint=true annotation by disclosing exactly what is destroyed (enrollees exit, queued sends are cancelled) and what survives (history is retained and can be restored, in a paused state). For a destructive, non-idempotent mutation this is the precise lifecycle context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.