Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations, the description discloses push delivery, blocking expectation, and rate limiting. It doesn't detail side effects or what happens after rejection, but the annotations already mark it as non-read-only and non-idempotent, so the added behavior notes are useful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.