Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as destructive, and the description adds the meaningful behavioral consequence of denying network access. However, it does not disclose details such as whether blocking disconnects an active session, whether it is reversible, or whether siteId is required for multi-site environments. The description is consistent with destructiveHint but leaves some behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.