Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (destructiveHint=true): it discloses that credential purge is atomic, that purged credentials CANNOT be restored even by reactivate_spec, what operations become blocked, and that historical evidence remains readable. This is exactly the irreversibility and side-effect detail an agent needs before a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.