Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds 'opens 7d / 500 PASS' and 'Burn via POST /v1/session/cert + verify,' but these are unexplained and may even conflict with readOnlyHint (opening a window suggests a state change). No clear account of what happens, side effects, or required auth is given. The cryptic 'burn' step could imply destruction, but the description does not reconcile it with the non-destructive annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.