Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description must fully disclose behavioral traits. It only states 'This changes server state,' which is minimal. It does not describe what happens if the container is already running (error or no-op), whether the call returns immediately or waits for the container to become healthy, permission requirements, or potential side effects. For a mutating tool, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.