Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false). The description adds genuine context beyond that: the relay mechanism, the sandbox limitation, and that the server selects the ingest endpoint. However, it says nothing about auth, retries, what happens on failure, or why the operation is non-idempotent, which matters for a write tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.