Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing partial-success semantics (invalid[] and alreadyWatched[] arrays), the 500-registration capacity ceiling, and the auth requirement (OAuth or account key, not a system key). The additive behavior is consistent with destructiveHint=false and idempotentHint=true, so there is no annotation contradiction. It stops short of describing ordering or exactly how many succeed per call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.