Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden but offers minimal behavioral insight. It implies a mutation (toggle) but doesn't disclose critical details: whether this requires admin permissions, if changes are immediate or require a restart, potential side effects on network traffic, or error handling. For a security-related mutation tool, this lack of transparency is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.