Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate the tool is not read-only, not destructive, not idempotent, and open-world, but the description adds no behavioral context beyond the basic action. It doesn't explain what 'stop' entails (e.g., graceful shutdown, data persistence, service interruption), whether it requires specific permissions, or what happens on repeated calls, missing critical details for a state-changing operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.