Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false, openWorldHint=true, idempotentHint=false and destructiveHint=false, but the description adds nothing about what is mutated, what auth or file-format requirements apply, or whether repeated calls duplicate state. For a non-idempotent, open-world write endpoint the description carries a large undisclosed burden and discloses none of it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.