Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It clearly states that the actual execution must happen outside MCP ('executed outside MCP — this server cannot sign'), which conveys a read-only nature and a critical limitation. However, it does not explicitly state that it does not modify state or mention any side effects, but the 'cancel sign' statement strongly implies no writes. This is valuable context beyond the minimal schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.