Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Although annotations declare the safety profile (non-destructive, non-idempotent, closed-world), the description adds substantial behavior beyond them: bytes never traverse MCP, the caller must execute a returned PUT with exact bytes and returned headers, and explicit size caps per media type. It also warns against re-uploading on timeout, which is critical for a non-idempotent operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.