Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive, closed-world), it discloses concrete behavioral traits: a 100-attempt result cap, omission of event payloads and secrets, no manual resend side effect, and the required OAuth scope webhooks:read. This is meaningful context the annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.