Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (destructiveHint, idempotentHint, readOnlyHint), the description discloses the cascade deletion of auto-reply cooldown rows, the required auth scope (message_update), and the exact failure modes: 404 rule_not_found for an unknown rule and 404 inbox_not_found for another account's inbox. These are concrete behavioral facts an agent needs before a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.