Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes meaningfully beyond the annotations by disclosing the blast radius: other participants' holds persist, cleanup can resume, and canonical outcomes are unaffected. That is genuine effect-scoping context for a destructiveHint=true tool. It omits idempotency behavior (annotations say non-idempotent) and what a failed or repeated withdrawal does.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.