Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, but the description adds a key behavioral caveat: the URL is for the customer to open, and the agent must not open/fetch/follow it. This goes beyond annotations and is critical for safe correct use. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.