Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=false, and destructiveHint=true, so the "[WRITE]" prefix adds nothing. The clause "downstream refresh remains unknown" is genuine added context: it warns the agent that success does not guarantee secondaries update. However, nothing is said about permissions, side effects on live DNS traffic, or what the response contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.