Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=false, destructive=true, and closed-world, but the description adds real value beyond them: partial-update semantics, null-clears-override behavior, and an explicit authorization requirement that READ_ONLY access is refused. It still does not explain what the destructive flag means in practice (e.g., whether passing an array replaces the existing list).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.