Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses the auth/session requirement (account session + staff scope) and the guardrails that cause the call to be rejected. It stops short of stating idempotency, whether the account itself is affected, or the failure response shape, which keeps it out of the top band.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.