Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent annotations by disclosing batch limits (20 paths, 40,000 chars), pagination via offset/next_offset, and how different media are returned (inline images, 10-minute download links for PDFs/larger images). These are operationally critical behaviors an agent cannot infer from the annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.