Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false, idempotentHint=false and openWorldHint=true, but the description adds nothing about what the call does, what credentials the body must contain, whether it establishes a session, or what side effects occur. For a non-idempotent, open-world login operation this is a critical omission.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.