Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, openWorldHint, idempotentHint, destructiveHint=false), it discloses several non-obvious traits: the URL expires in 5 minutes, permissions (audience/signup/management) are re-checked on every call, the host downloads bytes using the same MCP credentials, and it deliberately omits OSS direct links/keys. These are exactly the security and lifecycle behaviors an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.