Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true and idempotentHint=true, but the description adds context annotations cannot: it is a WRITE available to any authenticated user, and it spells out the consequence of each value (ENABLED = evaluated, DISABLED = not evaluated), which is effectively what makes the destructive flag meaningful. It does not cover failure behavior for an unknown ruleId.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.