Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses two concrete effects (session revocation plus clearing the in-process token), which is genuine behavioral detail, but omits whether the call is idempotent, what happens if the token is already invalid, and what errors may surface.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.