Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=true, but the description goes well beyond them: it enumerates exactly what is destroyed (notes and attachments), specifies the authorization model, and states the 403 outcome for unauthorized callers. This is rich behavioral context layered on top of the structured hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.