Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructive=true and idempotent=true, but the description adds substantial context beyond them: the operation is permanent and non-resumable, the webhook URL is destroyed, later checks report 'cancelled', the MON- id is the sole credential so anyone holding it can cancel, and there is a 30 calls/minute limit. This is exactly the kind of irreversible-effect and auth disclosure the annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.