Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate the tool is not read-only (readOnlyHint=false) and not idempotent. The description adds 'upgrade' implying a mutation, but does not explain side effects, failure conditions (e.g., if no existing tunnel), or success criteria. Annotations reduce the burden but the description adds minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.