Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, and idempotentHint=false, so the "[WRITE]" tag and the irreversibility warning largely restate structured data. The description does add specificity about what is destroyed (one cached DNS name), but omits the existence of a dry_run safety path and any permission or target-scoping requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.