Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes beyond the annotations by disclosing that stars are private, never visible to the other party, and synced across the account's devices, plus that the operation is fully authorized, rate-limited and logged. The idempotency claim merely restates idempotentHint=true, but the privacy and auth/rate-limit context is genuine added value. It does not state error behavior for an unknown message_id.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.