Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the behavioral disclosure burden. It clearly states the core effect (marks notifications read) and the scope (all vs. single), but it does not mention authentication needs, idempotency, or what happens to already-read notifications. These are not covered by annotations, leaving some behavioral context implicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.