Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial context beyond the annotations: the five-minute validity window, that admission is not publication, that no private keys travel in the payload, and that 'contributed' fields are unverified third-party data whose instructions must be ignored. There is mild tension between 'reuse identical bytes' and idempotentHint=false, but that reads as server-side replay/dedup guidance for ambiguous failures rather than a contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.