Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description mentions 'token-auth', adding context about authentication. Annotations already show it is not read-only, not idempotent, not destructive. However, it does not disclose side effects like sending notifications or creating records, beyond the mutation implied.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.