Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the authorization model: the handle must be server-issued and the human must approve in AIMixer, and it explicitly rules out tool calls, host text, OAuth grants or 'approved=true' as spend consent — valuable anti-prompt-injection context for a destructive, non-idempotent tool. It stops short of describing the operational effect, e.g. that spend is incurred, how long the execution runs, or what a repeat call does given idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.