Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and idempotentHint=true. Description adds permission requirement ('admin+') and technical context (RFC 8693, on-behalf-of token policy). No additional behavioral traits like rate limits or side effects are disclosed, but the basic safety profile is covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.