Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The crucial non-obvious behavior is disclosed: credentials are entered by the user inside Local MCP and never transit the AI, so the agent knows it cannot programmatically authenticate. However, the annotations declare destructiveHint=true and readOnlyHint=false, and the description never reconciles that with what is otherwise an informational/instructional tool, leaving an agent unsure whether calling it mutates something.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.