Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It reveals that the tool re-runs the OAuth flow, implying re-authentication, but does not mention side effects such as invalidation of existing tokens, requirement for user interaction, or impacts on current session. Some transparency is present, but gaps remain.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.