Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full behavioral burden. It explicitly discloses that this is a destructive 'complete delete', a bookkeeping write operation, unofficial relative to the MCP, and requires user approval. This is unusually transparent for a delete tool, though it does not mention return values or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.