Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a non-read-only, closed-world operation. The description adds meaningful behavioral context beyond that: the call is free, creates an identity in one call, and returns agent_id plus a secret that is shown only once and must be saved. It does not cover idempotency or rate limits, but the one-time-secret warning is the critical behavior for this tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.