Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true, so the bar is lower, but the description adds real context: the effect is immediate, it applies across both REST and MCP surfaces, it is scoped to the caller's own account, and self-revocation is permitted and terminates the caller's own access. The main undisclosed behaviors are whether revocation is reversible and what happens when the id is unknown or already revoked.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.