Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It transparently notes that notes are deleted only on explicit request, preventing a common misconception. However, it does not disclose other side effects, such as whether active connections are affected, whether deletion is reversible, or what happens to related memory/notes beyond the single caveat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.