Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden and does disclose that this is an irreversible outward send gated on explicit human consent and a legal terms agreement — exactly the behavior an agent must know. It stops short of stating whether the draft token is single-use, whether retries are safe, or what failure modes occur, which leaves residual ambiguity for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.