Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, closed-world and non-destructive, so the bar is lower; the description nevertheless adds real behavior: the data is read live from the account, the collection list may be incomplete signalled by totals.truncated, and catalog collections are read-only. It doesn't cover auth/permission needs or response shape details, keeping it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.