Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations (readOnlyHint=false, idempotentHint=false, destructiveHint=false) already indicate a state-changing, non-idempotent action, so the bar is lower. The description adds the qualifier that it closes an *active* SSH session and scopes it to Docker operations, which provides useful context beyond the annotations. It does not describe side effects or behavior on non-active sessions, but this is acceptable given the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.