Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world reads, so the bar is lower. The description still adds real context: newest-first ordering, workspace access scoping, the quirk that AI-moderated studies remain processing while recruiting, and an explicit boundary that findings and session data are not returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.