Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false and idempotentHint=false; the description reinforces the non-idempotence and adds genuinely new facts: the raw token appears only in this result (must be captured immediately), the link is durable and read-only, and consuming it has no seat/unread side effects. It stops short of saying anything about token expiry or revocation workflow beyond what revoke_anchor implies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.