Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, non-open-world, so safety is covered; the description adds genuinely new context with 'not metered' and the caveat that register activity fields appear only where admitted statements report. Minor gap: no indication of result volume or ordering for a workspace that may hold many endpoints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.