Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses SSRF-safe DNS validation, that the call returns a durable operation receipt (async, not the final endpoint), and that the signing secret appears only in the completed operation result — a critical fact an agent would otherwise get wrong. It never explains why destructiveHint is true, which is the one remaining behavioral gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.