Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this is a non-readonly, non-idempotent, non-destructive, closed-world write. The description's added value is the caller context — that the UI card, not an agent, invokes it — which is genuinely useful. It says nothing about auth requirements, failure modes, or what the token lifecycle does after upload.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.