Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the mutation/safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false); the description adds real context beyond them by flagging that the operation is write-gated and that it deliberately stops short of booting guests or running CLI deployment. It still omits what happens on a repeat call or on a mismatched client/pid, leaving the non-idempotent hint unelaborated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.