Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, so the bar is lower, and the description still adds real context: it discloses the access-token prerequisite ('Works only when this connector carries the account's access token') and warns that brands, names, variants, notes and folder names are raw account-typed text returned unchanged — a useful trust/prompt-injection signal. It also states the default ordering, which annotations do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.