Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructiveHint/idempotentHint annotations, it discloses irreversibility, cascade scope ('everything they collected'), and partial-failure semantics: an unknown or already-deleted id is returned in the result and does not block the remaining deletions. That is precisely the behavior an agent needs before calling a destructive batch tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.