Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden. It discloses that login uses browser automation and that the token is cached for 24 hours, which are useful operational facts. However, it does not mention side effects such as invalidating a previous token, behavior on failure (e.g., network errors, CAPTCHA), or whether it is idempotent. These gaps leave uncertainty for an agent invoking the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.