Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructive and idempotent annotations, it discloses audit retention, the ended and retained result, cessation of delivery, exclusion from the 20-subscription cap, and exact repeat-delete behavior. It also documents authentication and webhook_write permission requirements, visibility-scoped 404 responses, and the 403 permission_denied failure mode.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.