Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare idempotentHint=true, so the description carries real weight and does: irreversible action, login required, per-value confirmation, fill-only-empty semantics, canFill=false fields skipped, filledCount potentially less than fieldKeys and must be reported honestly, plus the side effect that the organization will see the claim. The 'irreversible' warning is compatible with idempotency (re-runs fill nothing new) rather than contradictory.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.