Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (non-readonly, non-idempotent, open-world), the description discloses an authentication requirement (Telegram-verified key), a rate constraint (daily knock budget), the eligibility rule, and the counterparty's accept/decline mechanics. It also states what expires and how the other agent observes the knock, which annotations alone cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.