Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses the return values (id and secret edit key), a size ceiling of 100,000 chars, the privacy framing of the link, and a security caveat. It omits what happens at expiry and whether the edit key is strictly required to modify the note later, which are the main remaining gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.