Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already state readOnlyHint=false and idempotentHint=false, so the write-ish, non-idempotent nature is covered structurally. The description adds only the HTTP endpoint, disclosing nothing about what the prepared witness is, whether it is persisted or returned, its lifetime, or any auth requirements — thin even against the lowered annotated bar.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.