Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses the blast radius ('every entry') and that tags are overwritten rather than merged, which is the key risk. It does not say whether manually curated tags are lost, whether the change is reversible, or whether it requires a populated host list.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.