Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose side effects and requirements, but it only says 'Activate a firewall on a VPS.' It does not mention whether the firewall must already exist, whether activation is reversible, or what happens if the firewall is already active. This is insufficient for a state-changing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.