Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=false, destructiveHint=false and openWorldHint=false, so the safety bar is low, but the description adds nothing on top of them. Critically, real destructive-ish behaviors live only in the schema (an empty callback.url removes the webhook, and rotate_callback_secret invalidates the old signing secret) and are never surfaced in the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.