Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety (readOnlyHint=false, idempotentHint=true) but the description adds substantial behavior beyond them: 60-second expiry, single live-connection limit, 64 unexpired ticket cap, compaction semantics (not a lifetime reconnect quota), transport-only credential handling, and non-disclosure of upstream URL/credentials.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.