Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint and idempotentHint, so the description goes beyond them with real consequences: check stops immediately, incidents resolved, scheduling jobs removed, historical results kept, tunneling checks refused. Auth requirements (mcp scope, user role, read tokens refused) are also disclosed. It stops short of describing irreversibility or error shapes, so a 4 rather than a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.