Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds behavior annotations do not carry: the link expires after 10 minutes and the call requires an X-Mako-Key header. Expiry and auth requirements are exactly the sort of context an agent needs and cannot infer from readOnlyHint/openWorldHint. The 'mint' verb sits in mild tension with readOnlyHint, but generating an ephemeral URL does not modify stored state, so it is not a genuine contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.