Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint, openWorldHint, idempotentHint, and destructiveHint. The description adds valuable context beyond annotations: it clarifies the tool does not execute JavaScript or bypass access controls, and mentions bounded caching behavior. However, 'bounded' and 'normalized' are not fully explained, leaving some ambiguity about the exact text processing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.