Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond the annotations: login requirement, a 5-minute GET URL TTL, a mandate that the host download bytes with the same MCP credentials, per-call re-verification of file ownership and activity permission, and a no-third-party-forwarding constraint. These are exactly the operational traits (auth, expiry, security) that readOnlyHint/idempotentHint do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.