Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the mutation profile (readOnlyHint false, destructiveHint false), but the description adds meaningful behavior beyond them: the test user is one-hour, is never counted, and its rows and files are deleted afterward. It does not cover permissions or rate limits, but the ephemeral lifecycle and cleanup are well disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.