Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=false, and openWorldHint=true, so the safety bar is partly covered. The description adds genuinely non-obvious behavior: an ownership verification step, the requirement that a fresh connection be uploaded by the owner first, and the explicit warning that uncertain writes cannot be retried and submission plans cannot change. That is meaningful context beyond the annotations, though it omits what state is destroyed on the old connection.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.