Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true, non-idempotent, and open-world, so safety is covered structurally. The description adds meaningful behavioral context beyond that: the operation fails on submitted IAPs, which is not derivable from the schema or annotations. It omits whether deletion is permanent or what the response looks like, keeping it below 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.