Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the destructiveHint=true annotation by naming the cascade (all client grants destroyed), the external impact (existing shared links break for holders), the permanence of deletion, and the ownership authorization requirement. This is exactly the extra context a mutation tool needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.