Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the non-read-only, non-idempotent, open-world mutation profile, and the description adds real behavior on top: the nonce is single-use, `challenge` yields "what to sign or publish", and OAuth kinds return an `auth_url` for a browser handoff. It omits failure modes, whether a failed link can be retried with the same nonce, and any rate/permission constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.