Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses session scoping, but says nothing about overwriting an existing token, permission or auth prerequisites, persistence beyond the session, rate limits, or any error behavior for an invalid token — all relevant for a credential-setting mutation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.