Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=false and readOnlyHint=false, but the description adds genuinely useful context: the deletion is permanent and includes history, which qualifies the blast radius. It still omits whether owner permission is required, whether collaborators lose access, and whether the operation can be undone by any means.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.