Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of disclosing behavior. It states the destructive nature of the action ('Revoke'), the soft-revoke distinction via delayDays, and the Bearer authentication requirement. It does not mention error behavior or idempotence, but the key side effects are clearly disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.