Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds a meaningful scope constraint beyond the annotations: it lists only tunnels created by the current MCP process, not all system tunnels, and only active ones. This is a behavioral trait not captured by readOnlyHint, idempotentHint, or destructiveHint. It does not dwell on return format, but the output schema covers that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.