Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behaviors: it opens a browser for login, returns a link when called with no args, and accepts a token for session-only login. It also mentions the token is a JWT. Annotations indicate idempotentHint=true and destructiveHint=false, which align with the description (no destructive actions, repeated calls are safe). The description adds context about the permanent vs session-only distinction, which is beyond the annotations. However, it doesn't mention any side effects like rate limits or auth requirements for the tool itself.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.