Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive, closed-world), the description discloses that confirmed=false is a dry-run returning the question without opening OAuth, that confirmed=true triggers the client's OAuth linking UI and returns reconnect links, and that no user data or tokens are ever returned. This is exactly the behavioral context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.