Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructiveHint annotation, the description clarifies what is actually destroyed: Slack tools stop reading, but Local MCP holds no Slack sign-in, so nothing is signed out and the Slack app stays signed in locally. It also discloses the critical non-reversible-by-tool behavior: 'No tool turns it back on.' This is exactly the context an agent needs before invoking a destructive disconnect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.