Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and idempotentHint annotations, the description discloses that the URL is both 'secret' and 'short-lived', signaling the caller to treat it as sensitive and time-sensitive. It also clarifies that the tool returns a URL rather than the object bytes, which prevents a mistaken expectation of binary download. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.