Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the mutation profile (readOnlyHint=false, destructiveHint=false, openWorldHint=false), so the safety baseline is covered. The description adds one genuinely non-obvious behavioral fact: that idempotency is key-driven, so a retry with the same key is safe despite idempotentHint=false — this prevents accidental duplicate sessions. It does not disclose what happens to the referenced studies/sources, permission requirements, or failure modes, so it stops short of rich behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.