Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey that this is a write operation (readOnlyHint: false) and non-destructive (destructiveHint: false). The description adds useful context that the created user is temporary and intended for web access, but it does not disclose lifecycle details such as expiration, permissions, or how the temporary user relates to an existing IPMI user.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.