Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only and idempotent behavior. The description goes further, disclosing permission boundaries (no approval capability, no exposure of the stored change) and the retry-after-approval semantics, though it says nothing about response shape or expiry semantics beyond existence.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.