Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: states OAuth personal-connection requirement, refuses workspace keys, specifies resulting status (done, never delivered), that gates still apply, no retry and no budget reset, and the exact refusal shape (ok=false, review_requeue_refused, cause_code). This is unusually rich behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.