Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the mutation profile (readOnly=false, destructive=true, openWorld=true, idempotent=false), so the bar is lower. The description still adds genuine behavioral context beyond them: retry safety via request_key, anonymous-creation limits, the claim_url the caller must surface, and plan-limit enforcement. The idempotency-via-request_key wording is in mild tension with idempotentHint=false, but this is conditional (only authenticated + only when the key is supplied) rather than a contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.