Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false, destructiveHint=false, and openWorldHint=false, so the safety profile is partially covered. What the description does not disclose is meaningful: whether reconnect triggers a new OAuth/IMAP authorization handshake, whether it requires a prior get_sender_connect_link step, whether existing credentials are invalidated, or whether it is rate-limited by the provider. For a state-changing sender operation, those are exactly the facts an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.