Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions 'delegated restore' and 'user code', hinting at an authentication/authorization flow, but fails to detail critical aspects like required permissions, whether this initiates a restore or just provides a code, expected response format, or any rate limits. This leaves significant gaps for a tool involving Entra ID operations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.