Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the full burden of conveying behavior. It states that the tool returns a collection of canvases and filters to active ones in the current session, implying a read-only operation without side effects. It could specify what metadata is included, but the core behavioral expectation is clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.