Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this is a non-read-only, non-destructive, closed-world write, so the safety profile is covered. The description adds genuinely useful context beyond that: the attestation is stored 'against the credential owner,' clarifying accountability and attribution. It does not say whether the call is idempotent, what happens if the page was already acknowledged, or what a failure looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.