Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (which already flag a non-read-only, open-world, idempotent write), the description discloses credit cost, the low-confidence confirmation path, and concrete auth options (OAuth or Bearer acd_live_ key with a URL). This is behavior an agent cannot infer from the structured fields and is directly needed to call it successfully.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.