Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare openWorldHint=false and destructiveHint=false, so the description usefully adds that provider keys are never returned, that secrets are set out-of-band, and that the sender action requires an admin-scoped token. That is real disclosure beyond the structured fields. It does not spell out that `sender` overwrites the existing sender name, which is a mild but relevant mutation detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.