Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true and idempotentHint=true. The description adds minimal behavioral context beyond what annotations provide – it confirms the destructive nature but doesn't disclose side effects (e.g., whether messages become read-only, if the conversation can be reopened, or if there are permission requirements). This is insufficient for a destructive operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.