Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds useful context: this is legacy, not recommended as a primary buy, and the old POST /v1/session/cert + verify flow still works. However, the meaning of 'burn' is ambiguous and no additional behavioral details like auth requirements, rate limits, or side effects are disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.