Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond annotations: declares irreversibility, describes the retention-sweep relationship, notes the main thread exemption, and documents the return shape (success, deleted_session_id, deleted_messages) and error form. Annotations already flag destructive, but the description adds the specifics an agent needs before committing an irreversible action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.