Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry the safe-read profile (readOnly, idempotent, non-destructive, closed-world), and the description adds substantial behavior beyond that: pagination rules (default 25, max 100, follow every non-null nextCursor with unchanged filters), that scanId must belong to this Site/Topic, that classification comes from the highest-confidence eligible mention, and that a removed identity can reappear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.