Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish this is a non-read-only, non-destructive, closed-world operation; the description adds genuinely new behavioral facts: the credential is single-use, expires in 15 minutes, and does not itself claim tickets. Those constraints materially change how an agent should sequence calls.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.