Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, openWorldHint and destructiveHint=false, so the bar is lower. The description adds real context: the payload contents (connect URL or npm/PyPI/Docker install command, transport, repository, publisher, version, auth and payment terms, tags, example queries) and the 'when known' caveat that fields may be absent. It doesn't mention pagination or error behavior, which keeps it off a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.