Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is fully covered by structured data. The description adds only the notion of named record types and no failure semantics (e.g., missing key or wrong store), which is the one piece of behavior an agent could genuinely use here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.