Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare it non-read-only, idempotent, non-destructive, and the description adds real auth context (owner approval, scopes stored by InfraPulse, bearer reuse). It omits, however, that the tool also drives follow-up state changes (suspend, resume, refresh_funding), so an agent reading only the description would believe this is purely an onboarding call. Not a contradiction with annotations, but an incomplete behavioral picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.