Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a non-read-only, open-world, non-destructive operation. The description adds the crucial behavior that this is a redirect-based, human-in-the-loop flow and warns autonomous agents away from it, which annotations cannot express. It stops short of saying what happens after the session is created (expiry, duplicate sessions) but the output schema covers the return shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.