Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover idempotency and non-destructiveness, but the description adds genuinely new behavior: login required, no notification is sent, no friend relationship created, and a 404 should not be retried. The idempotent claim merely restates the annotation, but the 404/no-notification details are substantive additions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.