Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructive=true and idempotent=false. The description adds valuable context: the external-email effect, required permissions, and retry instructions with idempotency_key. It explains the modify-or-update behavior clearly, going beyond the annotation flags, though it could have disclosed side effects like which fields get updated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.