Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses the auth tier (`full_access` key), the fixed reason value applied, the endpoint/operationId, and the dedupe behavior of re-adding an existing address. One nuance worth noting: annotations declare `idempotentHint: false`, yet the stated 'returns the existing entry' behavior implies repeated calls have no additional effect — an agent doing retry logic could be misled, but this is a hint-level tension rather than a direct safety contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.