Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses that the indicator is VISIBLE to the counterpart, that it is ephemeral and sends no message, and that the call is approval-exempt yet authorized, rate-limited and logged. The annotations only say non-read-only, idempotent, open-world, non-destructive; the description supplies the operational and social consequences the agent actually needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.