Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (non-read-only, non-destructive, non-idempotent, closed-world). The description adds meaningful behavioral context: at least one expressive field must be non-empty, and the call returns a one-time control token. It does not explain what 'optional persistent' means or the consequences of creation, but it goes beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.