Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description declares "Idempotent on artifact_id", but the annotations set idempotentHint: false, which per MCP semantics means repeated identical calls have additional effect. That is a direct conflict on the single most retry-relevant property of a write tool. The remaining context (parent hashes may be external roots, no genesis index consumed) is genuinely useful, but the contradiction dominates.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.