Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose a non-read-only, idempotent, non-destructive write within a closed world. The description adds real context beyond that: it identifies the affected surface (AI calls / assistant settings) and a consequential side effect (calls are refused until a name exists). It stops short of stating permissions, auth, or response behavior, keeping it at a solid 4.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.