Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnlyHint=false, idempotentHint=false), the description discloses that the tool calls the platform LLM, writes records, may schedule people in the background, sends notifications, requires the gray-release flag, is rate-limited per user, and—critically—has no persistent request deduplication key, so retries can duplicate. This matches and enriches the annotations rather than contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.