Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-readOnly, non-destructive, non-idempotent, closed-world, so the bar is lower, yet the description adds real substance: the source is unmodified, the call consumes one plan generation, and it enumerates 'not_found' and 'limit_exceeded' failure modes including ownership scoping. It doesn't restate idempotency or reversal behavior, but the quota and error disclosures are valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.