Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, non-destructive, closed world), and the description adds real context beyond them: sample-* ids need no auth, team paths require API entitlement, and two different backends serve the data. It stops short of error behavior or rate limits, keeping it at 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.