Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, and idempotentHint=false; the description adds what the annotations cannot — that the note is internal-only and never customer-visible, plus the underlying route (POST /messages with type Note). It does not explain why destructiveHint is true or whether notes can be edited/removed later, which is a small remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.