Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond annotations (readOnly=false, openWorld=true, idempotent=false, destructive=false): the endpoint starts pending and only receives test events until the owner confirms on the website, the owner is emailed, the signing secret is returned only once, deliveries use Standard Webhooks signed headers, and only account-owner API keys or connected apps can create endpoints. This covers lifecycle, auth, and irreversibility that annotations alone do not.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.