Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, but the description adds real value: it enumerates the return payload (created/updated/unchanged, connections, errors with paths and hints, quota, team_hash) and reinforces the side-effect-free contract with 'Creates nothing'. It does not, however, mention permission or anonymity constraints that the schema carries.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.