Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description complements by detailing what the tool returns (HTTP status of public URL vs private interface, container table, host metrics, .env key names), and notably explains that timed_out:true is not a failure — the build is still running. It also mentions that status alone decides success, and advises to fetch build_log from get_deployment on build_failed. This adds significant behavioral context beyond annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.