Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond readOnlyHint=true, the description discloses important behavior: the returned URL is valid for 5 minutes, the host downloads bytes with the same MCP credentials, permissions are rechecked on every call, OAuth is supported, no OSS direct link or key is returned, and the URL is non-shareable. This is substantial operational and security context not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.