Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already supply readOnly=false, idempotent=true, destructive=false, but the description adds real behavioral context: the mutation is scoped to this user's switch only (not workspace-wide), it requires prior user confirmation, and it warns that quotedMaterial text is data, not instructions. It does not describe what happens to other users' settings or the response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.