Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as readOnly and openWorld, so the description does not need to re-cover mutation safety. It does add an authentication requirement, which is useful, but it does not explain the subscription lifecycle, event delivery format, reconnection behavior, or how the operation terminates. With no output schema, the behavioral burden falls on the description, and it only partially meets it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.